summaryrefslogtreecommitdiff
path: root/OpenSSL/test
Commit message (Collapse)AuthorAgeFilesLines
* Initialize a context at instantiation timeStephen Holsapple2015-02-121-0/+18
| | | | | | | | | | | | | | To maintain a Pythonic API, we need to initialize the store context object at object instantiation time so that it is possible to modify the trust store (a legitable use case) after the object is created. As the store context implementation becomes more featureful, this will become more important. E.g., when we add support for `X509_STORE_CTX_get0_param` and X509_STORE_CTX_set0_param` to change verification parameters, we'll want to do this. This change also adds a very simple `set_store` method mostly to make the initialization and modification changes easier to test.
* Refactoring verify_certStephen Holsapple2015-01-301-17/+17
| | | | | | | | | | | Apply the changes that we've been talking about in https://github.com/pyca/pyopenssl/pull/155 regarding the placement of verify_cert, viz., moving verify_cert from top level of crypto into X509StoreContext. This makes the pyOpenSSL API slightly different than the OpenSSL API, but the plan will be to add back a verify_cert to the top level that is nice to use.
* Make a more specific assertion about where the failure reason shows up.Jean-Paul Calderone2015-01-301-3/+3
|
* remove unused importJean-Paul Calderone2015-01-301-1/+0
|
* Small test method docstring fixes and fixes for tests of exceptional cases.Jean-Paul Calderone2015-01-301-20/+14
|
* Four space indentation and other whitespace fixes.Jean-Paul Calderone2015-01-301-10/+17
|
* Add OpenSSL.crypto.verify_chain method.Stephen Holsapple2015-01-301-2/+154
| | | | | | | | | | | | | | | This change adds support for verifying a certificate or a certificate chain. This implementation uses OpenSSL's underlying X509_STORE_CTX_* class of functions to accomplish this. This change also adds an intermediate signing certificate/key and a service certificate/key signed with the intermediate signing certificate, to make testing the OpenSSL.crypto.verify_chain method easier to test. I figured I would add it to the top level module so other people can use an intermediate signing certificate in their own tests. Issue: https://github.com/pyca/pyopenssl/issues/154
* Merge pull request #179 from exarkun/Context.check_privatekeyJean-Paul Calderone2015-01-192-4/+41
|\ | | | | Fix a regression in Context.check_privatekey which caused it to always succeed.
| * merge masterJean-Paul Calderone2015-01-181-0/+14
| |\
| * | Give assertIs and assertIsNot their stdlib-preferred names.Jean-Paul Calderone2014-12-121-4/+4
| | |
| * | Add tests for Context.check_privatekey.Jean-Paul Calderone2014-12-111-0/+37
| | |
* | | Merge pull request #172 from alex/fix-typosJean-Paul Calderone2015-01-181-2/+2
|\ \ \ | |_|/ |/| | Fix several typos.
| * | Fixed several typosAlex Gaynor2014-11-151-2/+2
| | |
* | | Add test for Connection.shutdown on closed socketPaul Aurich2015-01-081-0/+14
| |/ |/|
* | verisign.org turned off SSLv3 (Happy Days!)Alex Gaynor2014-11-151-2/+2
|/
* Added a docstringAlex Gaynor2014-08-141-0/+4
|
* Py3k fixAlex Gaynor2014-08-141-2/+2
|
* Added a test for loading ASN1 dataAlex Gaynor2014-08-141-2/+30
|
* the minimal documentation requirementsJean-Paul Calderone2014-05-061-0/+4
|
* merge masterJean-Paul Calderone2014-05-053-15/+433
|\
| * Merge pull request #108 from pyca/pkcs12-without-passphraseJean-Paul Calderone2014-05-051-8/+79
| |\ | | | | | | Re-enable support for loading PKCS12 containers that have no passphrase or an empty passphrase and let this be the default when no passphrase is passed to `load_pkcs12`.
| | * Fix too-long lines and fix repeated spelling error.Jean-Paul Calderone2014-05-051-13/+21
| | |
| | * Cleaner support PKCS#12 without passphrase.Stephen Holsapple2014-04-221-8/+71
| | | | | | | | | | | | | | | | | | | | | | | | | | | The upgrade from 0.13 -> 0.14 had a small backwards incompatible API change that, in 0.14, requires `load_pkcs12` to pass in a passphrase. This change makes the API backwards compatible by setting a default value for the passphrase argument. Add test cases and change log entry for changes.
| * | Merge pull request #101 from pyca/ecdheJean-Paul Calderone2014-05-013-4/+315
| |\ \ | | |/ | |/| Add basic support for using ECDHE.
| | * Add some Python 2.6 compatibility.Jean-Paul Calderone2014-05-011-0/+17
| | |
| | * Directly test that curves work well as set elements.Jean-Paul Calderone2014-05-011-0/+32
| | |
| | * Use that helper to define tests for equality of _EllipticCurve instances.Jean-Paul Calderone2014-04-301-1/+42
| | |
| | * Add a helper for testing equality.Jean-Paul Calderone2014-04-301-0/+130
| | |
| | * Merge branch 'master' into ecdheJean-Paul Calderone2014-04-191-0/+32
| | |\
| | * | restore even more python 3.2 compat!Jean-Paul Calderone2014-04-191-1/+1
| | | |
| | * | restore python 3.2 compatibilityJean-Paul Calderone2014-04-191-3/+3
| | | |
| | * | Mirror the OpenSSL API as is our idiom.Jean-Paul Calderone2014-04-191-3/+3
| | | |
| | * | Switch to an explicit curve object.Jean-Paul Calderone2014-04-182-98/+85
| | | | | | | | | | | | | | | | Happily, this eliminates just about all of the error cases.
| | * | Some versions of Python do not support the unicode literal syntax.Jean-Paul Calderone2014-04-171-1/+1
| | | |
| | * | Add a test for the failure condition of EC_KEY_new_by_curve_nameJean-Paul Calderone2014-04-171-2/+22
| | | |
| | * | Support for Python 2.6 - which lacks addCleanupJean-Paul Calderone2014-04-171-8/+9
| | | |
| | * | explicitly fail with a useful messageJean-Paul Calderone2014-04-171-2/+6
| | | |
| | * | Some docstring cleanups.Jean-Paul Calderone2014-04-171-8/+7
| | | |
| | * | Add a test for the False case of Cryptography_HAS_EC.Jean-Paul Calderone2014-04-171-0/+18
| | | |
| | * | Merge remote-tracking branch 'pyca/master' into ecdheJean-Paul Calderone2014-04-172-1/+158
| | |\ \
| | * | | ecdh: Use different exception types for different errorsAndy Lutomirski2014-04-041-3/+40
| | | | | | | | | | | | | | | | | | | | This sneakily fixes some test cases typos, too.
| | * | | Move test that checks for curve descriptions to a separate testLaurens Van Houtven2014-04-031-5/+11
| | | | | | | | | | | | | | | | | | | | This also ninja-fixes the typo that was in the previous comment.
| | * | | Merge branch 'ecdhe' of git://github.com/amluto/pyopenssl into ecdheLaurens Van Houtven2014-03-291-0/+19
| | |\ \ \
| | | * | | Identify elliptic curves by short name, not NIDAndy Lutomirski2014-03-131-10/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using NIDs is awkward and requires updating pyOpenSSL every time a new curve is added. This approach avoids needing to update pyOpenSSL each time a new curve is added, and it results in more readable code and a more readable dict ELLIPTIC_CURVE_DESCRIPTIONS.
| | | * | | Merge branch 'master' into ecdhe-supportAlex Gaynor2014-02-221-2/+2
| | | |\ \ \
| | | * \ \ \ Merge branch 'master' into ecdhe-supportAlex Gaynor2014-02-203-55/+252
| | | |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: .gitignore OpenSSL/test/test_ssl.py
| | | * | | | | Use the internal nameAlex Gaynor2014-01-171-2/+2
| | | | | | | |
| | | * | | | | Added testsAlex Gaynor2014-01-171-0/+12
| | | | | | | |
| * | | | | | | Merge remote-tracking branch 'pyca/master' into wantwritetest-37+67Jean-Paul Calderone2014-04-212-1/+190
| |\ \ \ \ \ \ \ | | | |_|_|_|_|/ | | |/| | | | |
| | * | | | | | Also accept buffer in Connection.send and .sendallMarkus Unterwaditzer2014-04-191-0/+32
| | | |_|_|_|/ | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not at all sure what i am doing, but according to http://hg.python.org/cpython/rev/9e718d8f71e8/, buffers are a accepted type to pass to sendall in Python 2.6.
View Lorry Controller Status