Commit graph

8000 commits

Author SHA1 Message Date
Jakub Stasiak
0d0d70bd78
Add a way to pass current time to Fernet (#5256)
* Add a way to pass current time to Fernet

The motivation behind this is to be able to unit test code using Fernet
easily without having to monkey patch global state.

* Reformat to satisfy flake8

* Trigger a Fernet.encrypt() branch missing from coverage

* Revert specifying explicit current time in MultiFernet.rotate()

Message's timestamp is not verified anyway since ttl is None.

* Change the Fernet's explicit current time API slightly

This's been suggested in code review.

* Fix a typo

* Fix a typo

* Restore full MultiFernet test coverage and fix a typo

* Restore more coverage

time.time() is not called by MultiFernet.rotate() anymore so the monkey
patching and lambda need to go, because the patched function is not used
and coverage calculation will rightfully notice it.

* Remove an unused import

* Document when the *_at_time Fernet methods were added
2020-06-14 13:30:18 -05:00
Alex Gaynor
09b9fd924d
Update the link to CERT's website for linkcheck (#5278) 2020-06-14 13:29:16 -05:00
Paul Kehrer
170599b87c
block another broken sphinx version (#5277) 2020-06-14 13:11:07 -04:00
Henry Turner
bf7def7424
Add missing exceptions to documentation in key derivation function primitives (#5271)
* Update key-derivation-functions.rst

Add missing exception to documentation

* Update key-derivation-functions.rst

Adding missing exception documentation for AlreadyFinalized to all the derive() functions missing it

* Removed trailing whitespace
2020-06-12 22:09:47 -05:00
Alex Gaynor
9dd4e1f2ce
Block a sphinx version that's broken (#5272) 2020-06-12 08:50:55 -05:00
twosigmajab
03c5d84036
Clarify that static linkage only applies to wheels (#5265) 2020-06-03 11:15:28 -05:00
Alex Gaynor
a02fdd60d9
Test on LibreSSL 3.2.0 (#5263) 2020-06-01 17:08:49 -05:00
Brad Warren
85fbb03678
pin certbot deps (#5264) 2020-06-01 15:19:51 -05:00
Marko Kreen
dbe247cc89
Consistently use 'self' in backend.py (#5261)
There happens to be global var named 'backend'
so backend._lib works, but is confusing.
2020-05-27 08:31:51 -04:00
Marko Kreen
bf175454a8
Test vectors for OpenSSH serialization format (#5151) 2020-05-25 13:24:17 -05:00
Marko Kreen
9470f67a30
Cleanup serialize (#5149)
* Additional tests for public/private_bytes

They expose few places that raise TypeError and AssertionError!
before, and ValueError later.

* Cleanup of private_bytes() backend

Also pass key itself down to backend.

* Cleanup of public_bytes() backend

* Test handling of unsupported key type
2020-05-25 13:17:25 -05:00
Jakub Stasiak
27f04412b5
Document that Fernet accepts text keys (#5255)
Keys are passed to base64.urlsafe_b64decode for decoding and it accepts
text as well as bytes.
2020-05-25 13:13:35 -05:00
Alex Gaynor
eceea9d912
Deprecate support for Python 2 (#5251) 2020-05-16 21:58:30 -05:00
Alex Gaynor
1fcd120c32
Use codecov-bash on travis (#5252) 2020-05-16 21:13:45 -05:00
ohemorange
cace5c40c7
Install deps using josepy's constraints.txt file (#5247) 2020-05-12 21:41:16 -04:00
Alex Gaynor
0476431fa0
fixed new flake8 error (#5248) 2020-05-12 20:06:06 -05:00
Nikolay Morozov
e42c885d45
GOST certificates support in cryptography (#5195) 2020-05-08 14:35:55 -05:00
Paul Kehrer
0726d01e73
fedora now has python 3.8 (#5244) 2020-05-06 12:31:38 -04:00
Charles Y
e05795897c
Update symmetric-encryption.rst (#5240)
mis-named parameter
2020-04-29 14:41:56 -05:00
Alex Gaynor
7dcd284c6e
Remove dead constant time code (#5239) 2020-04-26 17:19:57 -05:00
Alex Gaynor
12e85b5916
Added wycheproof hmac vectors (#5238) 2020-04-26 15:53:58 -05:00
Alex Gaynor
263bad82ed
Refs #5075 -- added the remainder of the wycheproof rsa tests (#5237) 2020-04-26 12:36:11 -05:00
Alex Gaynor
069691a27b
Added wycheproof RSA PKCSv1 encryption tests (#5234) 2020-04-26 10:44:49 -05:00
Alex Gaynor
8aa8665eaa
Perform retries when downloading OpenSSL in GHA (#5236) 2020-04-26 10:04:39 -05:00
Alex Gaynor
33460885b9
Test against LibreSSL 3.1.0 (#5235) 2020-04-26 08:11:35 -05:00
Alex Gaynor
01eb304b08
Dropped support for LibreSSL 2.7, 2.8, and 2.9.0 (2.9.1+ are still supported) (#5231) 2020-04-25 22:42:20 -05:00
Alex Gaynor
b87a238dc1
retry when downloading codecov.sh (#5233) 2020-04-25 21:18:36 -05:00
Paul Kehrer
31c33c1c54
remove four builds (#5229) 2020-04-25 20:12:07 -04:00
Alex Gaynor
33faef3bb0
Make codecov upload errors in GHA pass silently (#5232)
The spurious failure rate on codecov uploads is high enough that this is a cure worse than the disease
2020-04-25 18:31:32 -05:00
Alex Gaynor
e978ba79dc
Removed non-x86 builds from CI -- they're quite simply too slow (#5230) 2020-04-25 16:48:57 -05:00
Alex Gaynor
f9ab38e6b2
Update release procedure for infra changes (#5228) 2020-04-25 13:32:01 -05:00
Alex Gaynor
c38c4d2924
Ubuntu rolling is now on py3.8 (#5226) 2020-04-24 12:15:12 -05:00
Paul Kehrer
579b4320bc
fix typo in error msg for download openssl (#5223) 2020-04-22 20:13:04 -04:00
Paul Kehrer
311722e330
port 2.9.2 changelog to master (#5222) 2020-04-22 20:03:59 -04:00
Paul Kehrer
331bcf6b2c
upgrade to 1.1.1g across our CI (#5218) 2020-04-22 19:30:40 -04:00
Paul Kehrer
e0ed99cdbe
we need to check out the code in the wheel builder for macos now (#5220)
can't download openssl without the script to do it
2020-04-22 17:38:13 -04:00
Paul Kehrer
23648a4236
use our infra built openssl on the macos side now too (#5217)
* use our infra built openssl on the macos side now too

* remove no longer required brew updates

* need requests

* need this env var

* update the wheel-builders too
2020-04-22 15:52:20 -04:00
Alex Gaynor
a7f846e0d6
Forward port the 2.9.1 changelog (#5214) 2020-04-21 14:31:33 -05:00
Paul Kehrer
5526dca15b
goodbye azure (#5207)
* goodbye azure

* Update tox.ini

Co-Authored-By: Alex Gaynor <alex.gaynor@gmail.com>

* review comments

* update a comment

* delete final azure yaml

* linting

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2020-04-19 20:32:28 -04:00
Alex Gaynor
def74d90f1
yaml syntax error fix (#5206) 2020-04-19 18:15:14 -05:00
Paul Kehrer
3e0f9d44b6
macos wheel builder (#5205)
* macos wheel builder

* review comments
2020-04-19 18:15:08 -04:00
Alex Gaynor
b13ad5697d
Migrate the manylinux wheel builder to GHA (#5202) 2020-04-19 12:11:49 -05:00
Alex Gaynor
ffd72a6f40
fixed anchor in changelog (#5201) 2020-04-18 19:23:02 -05:00
Alex Gaynor
78fc8798da
Use Ubuntu bionic for travis CI (#5200)
* Use Ubuntu bionic for travis CI

* Update .travis.yml
2020-04-18 18:24:14 -05:00
Alex Gaynor
ea5d466839
Bumped docs and twisted CI jobs to latest 1.1.1 builder (#5199) 2020-04-18 13:45:12 -05:00
Alex Gaynor
59d8bc6fb9
Document that we test on bullseye (#5197)
* Document that we test on bullseye

* Update spelling_wordlist.txt

* Update installation.rst
2020-04-17 20:14:19 -05:00
Alex Gaynor
586cb7773d
Added CI for Debian bullseye (#5196) 2020-04-15 14:10:35 -05:00
Alex Gaynor
84e3e6213d
Run tests on aarch64, ppc, and s390x (#5192)
* Run tests on aarch64, ppc, and s390x

* Update .travis.yml

* Try disabling it this way

* Update .travis.yml

* Update .travis.yml
2020-04-12 22:04:25 -05:00
Alex Gaynor
1e307e5e8a
Remove some remaining 1.0.1 cruft (#5193) 2020-04-12 18:27:26 -05:00
Alex Gaynor
37e11ccb99
Refs #5075 -- use ed448_test.json from wycheproof (#5191) 2020-04-12 10:02:02 -05:00