summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Mention LibreSSL and BoringSSL in our installation docs (#6597)Alex Gaynor2021-11-131-0/+3
|
* Make --capture=no and --strict-markers enabled by default for pytest (#6598)Alex Gaynor2021-11-132-3/+3
|
* boring changelog (#6595)Paul Kehrer2021-11-122-0/+5
|
* handle unused bits in distribution point reasons as well (#6594)Paul Kehrer2021-11-122-7/+9
|
* encode KeyUsage with unused bits (#6593)Paul Kehrer2021-11-122-14/+68
|
* Run tests/hazmat/bindings/test_openssl.py on BoringSSL (#6592)Alex Gaynor2021-11-122-10/+21
| | | Refs #6576
* skip pkcs7 tests on boring (#6591)Paul Kehrer2021-11-123-20/+31
| | | | | * skip pkcs7 tests on boring * make it work
* Allow to serialize extension values as DER bytes strings (#6346)Felix Fontein2021-11-126-2/+557
| | | | | * Allow to serialize extension values as DER bytes string. * Prepare test for SignedCertificateTimestamps.
* x509 tests for boring (#6590)Paul Kehrer2021-11-125-11/+16
|
* Run tests/primitives/test_{dh,serialization}.py on BoringSSL (#6589)Alex Gaynor2021-11-123-1/+21
| | | Refs #6576
* Run tests/hazmat/backends/ under BoringSSL (#6588)Alex Gaynor2021-11-123-2/+9
| | | Refs #6576
* Run a small number of bindings and backend tests on BoringSSL (#6587)Alex Gaynor2021-11-121-1/+1
| | | Refs #6576
* Run tests/primitives/ (minus a few files) on BoringSSL (#6584)Alex Gaynor2021-11-113-4/+9
|
* Make DH bindings follow style guide (#6586)Alex Gaynor2021-11-121-2/+2
|
* Run tests/wycheproof/ on BoringSSL (#6583)Alex Gaynor2021-11-123-3/+15
|
* Move extension encoding code to new crate x509::extensions (#6571)Felix Fontein2021-11-1112-597/+565
| | | | | | | | | | | * Move certificate extension encoding code to new crate x509::extensions. * Move more extension serialization code to x509::extensions. * Unify extension encoding into one function. * Move all extension OIDs to x509::extensions. * Move all OIDs to x509::oid.
* Break down the test/hazmat/ skips (#6578)Alex Gaynor2021-11-101-1/+1
| | | Refs #6576
* Run tests/hypothesis/ under boringssl (#6577)Alex Gaynor2021-11-101-1/+1
| | | refs #6576
* Simplify how we test boring, in a way that'll be extensible to the future ↵Alex Gaynor2021-11-104-13/+16
| | | | | | | | | (#6575) * Simplify how we test boring, in a way that'll be extensible to the future * Break out what we ignore * Get fernet tests passing on boringssl
* try to make the coverage handling of this better (#6574)Alex Gaynor2021-11-101-1/+3
|
* retry paramiko tests if they fail (#6572)Paul Kehrer2021-11-081-1/+2
| | | | | | | * retry paramiko tests if they fail flaky tests are so annoying * comment
* Bump BoringSSL version (#6568)Alex Gaynor2021-11-091-2/+2
|
* actions/checkout doesn't work with non-github repos apparently (#6561)Alex Gaynor2021-11-081-4/+1
|
* Bump libc from 0.2.106 to 0.2.107 in /src/rust (#6566)dependabot[bot]2021-11-081-2/+2
| | | | | | | | | | | | | | | | Bumps [libc](https://github.com/rust-lang/libc) from 0.2.106 to 0.2.107. - [Release notes](https://github.com/rust-lang/libc/releases) - [Commits](https://github.com/rust-lang/libc/compare/0.2.106...0.2.107) --- updated-dependencies: - dependency-name: libc dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* add changelog entry for x25519/x448 public keys in certs (#6563)Paul Kehrer2021-11-071-0/+8
| | | | | * add changelog entry for x25519/x448 public keys in certs * typo
* allow x25519/x448 public keys in certificatebuilder (#6562)Paul Kehrer2021-11-074-9/+82
| | | | also document that we can return these key types in a certificate, although they can't be self-signed of course
* Add a github action to check for new versions of boringssl (#6560)Alex Gaynor2021-11-071-0/+35
| | | | | * Add a github action to check for new versions of boringssl * poke GHA
* Simplify backed name check in tests (#6558)Alex Gaynor2021-11-071-2/+2
| | | | | * Simplify backed name check in tests * poke GHA
* Begin building with BoringSSL in our CI, no tests yet (#6554)Alex Gaynor2021-11-0710-1/+139
| | | | | | | | | | | | | | | * Attempt to build against BoringSSL in CI * Check for BoringSSL in the SSL bindings * Check for BoringSSL in the err bindings * Check for BoringSSL in the pkcs7 bindings * Check for BoringSSL in the bignum bindings * Check for BoringSSL in the EVP bindings * Check for BoringSSL in the X.509 verify bindings
* Remove datagram bio bindings (#6555)Alex Gaynor2021-11-061-2/+0
|
* Check for BoringSSL in the SSL bindings (#6553)Alex Gaynor2021-11-062-1/+17
|
* allow multiple identical pem blocks (#6551)Paul Kehrer2021-11-057-51/+41
| | | | | this matches our behavior to OpenSSL and allows users to pass a chain to our PEM loaders. To make this a little less magical it is now documented.
* fix nightly clippy warnings (#6552)Paul Kehrer2021-11-053-6/+3
| | | | oid implements the Display trait so to_string is redundant when passing to format!
* Added an additional check for boringssl in the ssl bindings (#6547)Alex Gaynor2021-11-051-1/+1
|
* remove some unused functions and add some docs about use (#6544)Paul Kehrer2021-11-043-17/+6
| | | | | | | | | | | * remove some unused functions and add some docs about use The functions being removed are unused by both cryptography and pyopenssl and the existing functions (x509_getm_notBefore/notAfter) are not deprecated. * more bindings removed and docs Cryptography_EVP_PKEY_id was dropped from pyOpenSSL in 2017
* document various 36.0 changes (#6545)Paul Kehrer2021-11-041-0/+9
|
* Bump pyo3 and fix warnings (#6542)Alex Gaynor2021-11-044-11/+11
|
* Revert "don't use wheels for coverage to work around musllinux perf issues ↵Alex Gaynor2021-11-041-2/+0
| | | | | (#6511)" (#6541) This reverts commit 2a654d46dc50c2c6bca9a31719333a8c391e1353.
* deprecate backend part 6 of n (#6524)Paul Kehrer2021-11-036-714/+24
|
* remove OPENSSL_no_config (#6536)Paul Kehrer2021-11-031-2/+0
|
* Explicitly specify the ref when cloning wycheproof (#6539)Alex Gaynor2021-11-031-0/+6
| | | This leads to a github API call which leads to rate limiting which leads to sadness
* deprecate backend part 14 of...probably 15? (#6534)Paul Kehrer2021-11-037-94/+32
| | | | | | | | * * CMAC * HMAC * * hashes * * keywrap
* deprecate backend part 11 of n (#6530)Paul Kehrer2021-11-033-32/+14
| | | cipher class
* deprecate backend part 9 of n (#6528)Paul Kehrer2021-11-033-59/+68
| | | * DSA, DH, EC converted to ignore backend arg
* deprecate backend part 10 of n (#6529)Paul Kehrer2021-11-034-64/+65
|
* deprecate backend part 8 of n (#6527)Paul Kehrer2021-11-032-30/+15
| | | | | The RSA chapter: * Retype backend args to typing.Any * Stop using _get_backend and directly import
* some installation doc improvements (#6525)Paul Kehrer2021-11-031-25/+4
|
* deprecate backend part 7 of n (#6526)Paul Kehrer2021-11-035-87/+37
| | | | * Move around some code to kill the need for a backend method * Type the backend arg to typing.Any since we just don't care now
* deprecate backend part 5 of n (#6523)Paul Kehrer2021-11-033-16/+2
| | | | | * deprecate backend part 5 of n * remove doc8
* deprecate backend part 12 of n (#6532)Paul Kehrer2021-11-0312-240/+57
| | | All the KDFs