add changelog and a warning for is_signature_valid on crl (#3861)

* add changelog and a warning

* document this properly
This commit is contained in:
Paul Kehrer 2017-08-12 08:52:55 -05:00 committed by Alex Gaynor
parent 6c02ee85bc
commit f944c40c86
2 changed files with 8 additions and 0 deletions

View file

@ -32,6 +32,8 @@ Changelog
:attr:`~cryptography.x509.RFC822Name.value` attribute was deprecated, users
should use :attr:`~cryptography.x509.RFC822Name.bytes_value` to access the
raw value.
* Added :meth:`~cryptography.x509.CertificateRevocationList.is_signature_valid`
to :class:`~cryptography.x509.CertificateRevocationList`.
.. _v2-0-3:

View file

@ -567,6 +567,12 @@ X.509 CRL (Certificate Revocation List) Object
.. versionadded:: 2.1
.. warning::
Checking the validity of the signature on the CRL is insufficient
to know if the CRL should be trusted. More details are available
in :rfc:`5280`.
Returns True if the CRL signature is correct for given public key,
False otherwise.