delta/python-packages/pyopenssl.git, branch gha github.com: pyca/pyopenssl.git Migrate CI to GHA 2020-11-18T00:47:04+00:00 Alex Gaynor alex.gaynor@gmail.com 2020-11-18T00:39:50+00:00 08e3508795ea44e6c7490bb3a9f29d32e01c95c6 






Fix spelling of set in set_verify docstring (#959)
2020-11-13T14:12:49+00:00

Arne Schwabe
arne@rfc2549.org

2020-11-13T14:12:49+00:00

e93aea7e96b3eef8fa5dce54a3c221668821e282












Stop testing py35 with cryptography master (#958)
2020-11-12T23:21:35+00:00

Alex Gaynor
alex.gaynor@gmail.com

2020-11-12T23:21:35+00:00

55f2c2b138705b517b8002c33c0c68a2c46fb545












Fix typo in debug command output (#957)
2020-11-12T22:59:27+00:00

Michael Lazar
lazar.michael22@gmail.com

2020-11-12T22:59:27+00:00

5aaef1e07e123f21288a3268392a865480ccb519

Co-authored-by: Michael Lazar <mlazar@doctorondemand.com>




Co-authored-by: Michael Lazar <mlazar@doctorondemand.com>






Drop CI for OpenSSL 1.0.2 (#953)
2020-10-27T04:15:17+00:00

Alex Gaynor
alex.gaynor@gmail.com

2020-10-27T04:15:17+00:00

124a0134fdb7decb0136b4b6f7892b87b919e74e

* Drop CI for OpenSSL 1.0.2

* Delete code for coverage reasons

* Bump minimum cryptography version




* Drop CI for OpenSSL 1.0.2

* Delete code for coverage reasons

* Bump minimum cryptography version






Fixing issue #798 (#907)
2020-10-18T15:55:40+00:00

jalberdi004
joseba.alberdi@ehu.eus

2020-10-18T15:55:40+00:00

669dcc3488a4803b2c321218def6554805940c48

* Fixing issue #798, thanks to @reaperhulk; removing undocumented '%s' option and getting the date in a more robust way

Co-authored-by: Joseba Alberdi <j.alberdi@simuneatomistics.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>




* Fixing issue #798, thanks to @reaperhulk; removing undocumented '%s' option and getting the date in a more robust way

Co-authored-by: Joseba Alberdi <j.alberdi@simuneatomistics.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>






Correct typos in crypto.py (#949)
2020-10-14T19:41:20+00:00

Felix Yan
felixonmars@archlinux.org

2020-10-14T19:41:20+00:00

3db93f1ad0c3e6f0e3dc5773b492a932b4d6e84a












fixed tests for twisted change (#950)
2020-10-14T19:20:10+00:00

Alex Gaynor
alex.gaynor@gmail.com

2020-10-14T19:20:10+00:00

1bba14bfb905fb571609d8047dc26bfae7e35cb7

* fixed tests for twisted change




* fixed tests for twisted change






crypto._PassphraseHelper: pass non-callable passphrase using callback (#947)
2020-10-13T04:14:19+00:00

Huw Jones
huw@huwcbjones.co.uk

2020-10-13T04:14:19+00:00

cdd6696025b997646497b85cc0db6b27db12f92b

* crypto._PassphraseHelper: pass non-callable passphrase using callback
Fixes #945

Before this commit, we would pass a bytes passphrase as a null terminated string.
This causes issue when a randomly generated key's first byte is null because
OpenSSL rightly determines the key length is 0.
This commit modifies the passphrase helper to pass the passphrase via the
 callback

* Update changelog to document bug fix




* crypto._PassphraseHelper: pass non-callable passphrase using callback
Fixes #945

Before this commit, we would pass a bytes passphrase as a null terminated string.
This causes issue when a randomly generated key's first byte is null because
OpenSSL rightly determines the key length is 0.
This commit modifies the passphrase helper to pass the passphrase via the
 callback

* Update changelog to document bug fix






Allow using additional untrusted certificates for chain building in X509StoreContext (#948)
2020-10-12T13:42:23+00:00

Sándor Oroszi
oroszisam@gmail.com

2020-10-12T13:42:23+00:00

83ef2306a1481e0cf7f53899c390497256711e29

The additional certificates provided in the new `chain` parameter will be
untrusted but may be used to build the chain.

This makes it easier to validate a certificate against a store which
contains only root ca certificates, and the intermediates come from e.g.
the same untrusted source as the certificate to be verified.

Co-authored-by: Sandor Oroszi <sandor.oroszi@balabit.com>




The additional certificates provided in the new `chain` parameter will be
untrusted but may be used to build the chain.

This makes it easier to validate a certificate against a store which
contains only root ca certificates, and the intermediates come from e.g.
the same untrusted source as the certificate to be verified.

Co-authored-by: Sandor Oroszi <sandor.oroszi@balabit.com>