diff options
| author | William Woodruff <william@trailofbits.com> | 2022-05-31 18:51:32 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-05-31 22:51:32 +0000 |
| commit | c1b7307a3e4ef9cd246feae88178afba7389405c (patch) | |
| tree | d839cedb34467a2e7c803ac4fb78173bbedd5cfc /docs/development | |
| parent | 5c0f45032803836227b121793b97ccc7a9fc2340 (diff) | |
| download | cryptography-c1b7307a3e4ef9cd246feae88178afba7389405c.tar.gz | |
X.509/Certificate: Add `tbs_precertificate_bytes` property (#7279)
* Add `tbs_precertificate_bytes` property
* docs/x509: document `tbs_precertificate_bytes`
Signed-off-by: William Woodruff <william@trailofbits.com>
* tests/x509: add two trivial tests
Signed-off-by: William Woodruff <william@trailofbits.com>
* x509/base: fix lint
Signed-off-by: William Woodruff <william@trailofbits.com>
* oid: add CERTIFICATE_TRANSPARENCY (1.3.6.1.4.1.11129.2.4.4)
Signed-off-by: William Woodruff <william@trailofbits.com>
* hazmat/oid: rehome CERTIFICATE_TRANSPARENCY under ExtendedKeyUsageOID
Signed-off-by: William Woodruff <william@trailofbits.com>
* docs/x509: fix link, help the spellchecker
Signed-off-by: William Woodruff <william@trailofbits.com>
* x509: Raise ValueError when we can't filter SCT list extension
* tests: Expect a `ValueError` when accessing `tbs_precertificate_bytes`
in default example
* tests, vectors: Add TBS precert vector for test comparison
* docs/x509: document the `CERTIFICATE_TRANSPARENCY` OID
Signed-off-by: William Woodruff <william@trailofbits.com>
* docs/x509: elaborate `tbs_precertificate_bytes`
Signed-off-by: William Woodruff <william@trailofbits.com>
* rust/x509: remove unused OID
Signed-off-by: William Woodruff <william@trailofbits.com>
* x509/certificate: tweak error
Signed-off-by: William Woodruff <william@trailofbits.com>
* tests/x509: reorganize
Signed-off-by: William Woodruff <william@trailofbits.com>
* Update src/rust/src/x509/certificate.rs
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* tests/x509: more reorg, rename
Signed-off-by: William Woodruff <william@trailofbits.com>
* docs: document new testvector
Signed-off-by: William Woodruff <william@trailofbits.com>
* docs: coax the spellchecker
Signed-off-by: William Woodruff <william@trailofbits.com>
* tests/x509: use a cert that doesn't require SHA-1
Signed-off-by: William Woodruff <william@trailofbits.com>
* tests/x509: test for no extensions at all
Signed-off-by: William Woodruff <william@trailofbits.com>
Co-authored-by: Alex Cameron <asc@tetsuo.sh>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
Diffstat (limited to 'docs/development')
| -rw-r--r-- | docs/development/test-vectors.rst | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/docs/development/test-vectors.rst b/docs/development/test-vectors.rst index 9bf841599..27240ea3e 100644 --- a/docs/development/test-vectors.rst +++ b/docs/development/test-vectors.rst @@ -281,6 +281,8 @@ X.509 ``explicitText`` entry with a ``BMPString`` type. * ``scottishpower-bitstring-dn.pem`` - An ECDSA certificate that contains a subject DN with a bit string type. +* ``cryptography-scts-tbs-precert.der`` - The "to-be-signed" pre-certificate + bytes from ``cryptography-scts.pem``, with the SCT list extension removed. Custom X.509 Vectors ~~~~~~~~~~~~~~~~~~~~ |