summaryrefslogtreecommitdiff
path: root/OpenSSL
Commit message (Collapse)AuthorAgeFilesLines
* merge masterremove-rationaleJean-Paul Calderone2015-03-156-20/+417
|\
| * Fix trivial rst syntax errors.Jean-Paul Calderone2015-03-151-2/+2
| |
| * Tweaks to the X509StoreContextError docstring.Jean-Paul Calderone2015-03-151-2/+2
| |
| * Give this new top-level function a docstring.Jean-Paul Calderone2015-03-151-0/+7
| |
| * Initialize a context at instantiation timeStephen Holsapple2015-02-122-1/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | To maintain a Pythonic API, we need to initialize the store context object at object instantiation time so that it is possible to modify the trust store (a legitable use case) after the object is created. As the store context implementation becomes more featureful, this will become more important. E.g., when we add support for `X509_STORE_CTX_get0_param` and X509_STORE_CTX_set0_param` to change verification parameters, we'll want to do this. This change also adds a very simple `set_store` method mostly to make the initialization and modification changes easier to test.
| * Trust return value in context errorStephen Holsapple2015-02-091-4/+5
| | | | | | | | | | | | | | | | | | | | The function X509_STORE_CTX_get_current_cert seems to always return a certificate. After reviewing upstream OpenSSL package, it seems they do no error checking on this function either, so I think this approach should be safe. Worst case scenario, for a case I think is impossible, we'll get a AttributeError or TypeError.
| * Refactoring verify_certStephen Holsapple2015-01-302-59/+66
| | | | | | | | | | | | | | | | | | | | | | Apply the changes that we've been talking about in https://github.com/pyca/pyopenssl/pull/155 regarding the placement of verify_cert, viz., moving verify_cert from top level of crypto into X509StoreContext. This makes the pyOpenSSL API slightly different than the OpenSSL API, but the plan will be to add back a verify_cert to the top level that is nice to use.
| * Make a more specific assertion about where the failure reason shows up.Jean-Paul Calderone2015-01-301-3/+3
| |
| * remove unused importJean-Paul Calderone2015-01-301-1/+0
| |
| * A little bit more explanation of what "context" means here.Jean-Paul Calderone2015-01-301-4/+6
| |
| * Small test method docstring fixes and fixes for tests of exceptional cases.Jean-Paul Calderone2015-01-301-20/+14
| |
| * Four space indentation and other whitespace fixes.Jean-Paul Calderone2015-01-301-10/+17
| |
| * Whitespace and X509StoreContext documentation cleanups.Jean-Paul Calderone2015-01-301-5/+18
| |
| * four space indentJean-Paul Calderone2015-01-301-1/+1
| |
| * Consistent a/an for x509.Jean-Paul Calderone2015-01-301-2/+2
| |
| * wrap long lineJean-Paul Calderone2015-01-301-1/+2
| |
| * I think this word choice makes more sense.Jean-Paul Calderone2015-01-301-1/+1
| |
| * Add OpenSSL.crypto.verify_chain method.Stephen Holsapple2015-01-303-6/+253
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change adds support for verifying a certificate or a certificate chain. This implementation uses OpenSSL's underlying X509_STORE_CTX_* class of functions to accomplish this. This change also adds an intermediate signing certificate/key and a service certificate/key signed with the intermediate signing certificate, to make testing the OpenSSL.crypto.verify_chain method easier to test. I figured I would add it to the top level module so other people can use an intermediate signing certificate in their own tests. Issue: https://github.com/pyca/pyopenssl/issues/154
| * Merge pull request #179 from exarkun/Context.check_privatekeyJean-Paul Calderone2015-01-193-4/+44
| |\ | | | | | | Fix a regression in Context.check_privatekey which caused it to always succeed.
| | * merge masterJean-Paul Calderone2015-01-182-2/+15
| | |\
| | * | Give assertIs and assertIsNot their stdlib-preferred names.Jean-Paul Calderone2014-12-121-4/+4
| | | |
| | * | Add the necessary SSL_CTX_check_private_key call and error handling.Jean-Paul Calderone2014-12-111-0/+3
| | | |
| | * | Add tests for Context.check_privatekey.Jean-Paul Calderone2014-12-111-0/+37
| | | |
| * | | Merge pull request #172 from alex/fix-typosJean-Paul Calderone2015-01-183-4/+4
| |\ \ \ | | |_|/ | |/| | Fix several typos.
| | * | Fixed several typosAlex Gaynor2014-11-153-4/+4
| | | |
| * | | Fixes #91 -- proper error handling in Connection.shutdownPaul Aurich2015-01-081-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | On error (return < 0), the OpenSSL documentation says to call SSL_get_error to discover the cause, as the act of trying to shutdown may raise lower-level errors (e.g. socket errors), or return SSL_ERR_WANT_WRITE or SSL_ERR_WANT_READ.
| * | | Add test for Connection.shutdown on closed socketPaul Aurich2015-01-081-0/+14
| | |/ | |/|
| * | verisign.org turned off SSLv3 (Happy Days!)Alex Gaynor2014-11-151-2/+2
| |/
| * Added a docstringAlex Gaynor2014-08-141-0/+4
| |
| * Py3k fixAlex Gaynor2014-08-141-2/+2
| |
| * Added a test for loading ASN1 dataAlex Gaynor2014-08-141-2/+30
| |
| * Fixes #145 -- fixes loading pkcs7 data from ASN1Alex Gaynor2014-08-131-1/+1
| |
* | Remove RATIONALELaurens Van Houtven2014-06-171-61/+0
|/ | | | | | | This document is horribly outdated and did more bad than good. It contained about half of something that vaguely resembled an issue tracker, and has otherwise hasn't been touched since the project's inception.
* the minimal documentation requirementsJean-Paul Calderone2014-05-061-0/+4
|
* merge masterJean-Paul Calderone2014-05-055-23/+623
|\
| * Merge pull request #108 from pyca/pkcs12-without-passphraseJean-Paul Calderone2014-05-052-9/+87
| |\ | | | | | | Re-enable support for loading PKCS12 containers that have no passphrase or an empty passphrase and let this be the default when no passphrase is passed to `load_pkcs12`.
| | * Fix too-long lines and fix repeated spelling error.Jean-Paul Calderone2014-05-051-13/+21
| | |
| | * Cleaner support PKCS#12 without passphrase.Stephen Holsapple2014-04-222-9/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | The upgrade from 0.13 -> 0.14 had a small backwards incompatible API change that, in 0.14, requires `load_pkcs12` to pass in a passphrase. This change makes the API backwards compatible by setting a default value for the passphrase argument. Add test cases and change log entry for changes.
| * | Merge pull request #101 from pyca/ecdheJean-Paul Calderone2014-05-015-7/+481
| |\ \ | | |/ | |/| Add basic support for using ECDHE.
| | * do some explainingecdheJean-Paul Calderone2014-05-011-0/+7
| | |
| | * Apparently that code is a no-go on Python 2. It seemed to work on Python 3 ↵Jean-Paul Calderone2014-05-011-5/+7
| | | | | | | | | | | | though.
| | * Try to work around the strange Python 3 behavior.Jean-Paul Calderone2014-05-011-0/+6
| | |
| | * Add some Python 2.6 compatibility.Jean-Paul Calderone2014-05-011-0/+17
| | |
| | * Directly test that curves work well as set elements.Jean-Paul Calderone2014-05-011-0/+32
| | |
| | * Cache the _EllipticCurve instances so the inherited-from-object equality ↵Jean-Paul Calderone2014-04-301-6/+28
| | | | | | | | | | | | does what we want.
| | * Use that helper to define tests for equality of _EllipticCurve instances.Jean-Paul Calderone2014-04-301-1/+42
| | |
| | * Add a helper for testing equality.Jean-Paul Calderone2014-04-301-0/+130
| | |
| | * Merge branch 'master' into ecdheJean-Paul Calderone2014-04-192-4/+46
| | |\
| | * | restore even more python 3.2 compat!Jean-Paul Calderone2014-04-191-1/+1
| | | |
| | * | restore python 3.2 compatibilityJean-Paul Calderone2014-04-191-3/+3
| | | |
View Lorry Controller Status