Commit graph

11418 commits

Author SHA1 Message Date
Alex Gaynor
7ea4b89cea
fixed formatting in changelog (#10225) 2024-01-22 07:01:14 -06:00
Alex Gaynor
410f4a1ee4
Allow brainpool on libressl (#10222) 2024-01-21 15:25:00 -03:00
Alex Gaynor
6b4a4de78a
Migrate SPKI parsing from OpenSSL to Rust (#10121) 2024-01-21 15:11:17 -03:00
Alex Gaynor
2c56719281
Reduce the amount of data that needs to be hashed to check if a cert is in a trust store (#10218) 2024-01-21 07:45:27 -03:00
Alex Gaynor
8d3b4b57bf
Avoid allocating a Vec -- directly create a list (#10217) 2024-01-21 07:40:11 -03:00
Alex Gaynor
39e3011170
Remove unused test utility (#10216) 2024-01-21 07:39:18 -03:00
Alex Gaynor
742267b159
bump bitflags (#10219) 2024-01-21 07:38:30 -03:00
dependabot[bot]
aaad6cbd33
Bump dnspython from 2.4.2 to 2.5.0 in /.github/requirements (#10221)
Bumps [dnspython](https://github.com/rthalley/dnspython) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/master/doc/whatsnew.rst)
- [Commits](https://github.com/rthalley/dnspython/compare/v2.4.2...v2.5.0)

---
updated-dependencies:
- dependency-name: dnspython
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-20 23:44:12 -05:00
dependabot[bot]
75d81bb882
Bump proc-macro2 from 1.0.76 to 1.0.78 in /src/rust (#10220)
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.76 to 1.0.78.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.76...1.0.78)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-21 04:34:55 +00:00
dependabot[bot]
d6ddd41dcf
Bump openssl from 0.10.62 to 0.10.63 in /src/rust (#10215)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.62 to 0.10.63.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.62...openssl-v0.10.63)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-20 00:19:59 +00:00
pyca-boringbot[bot]
663492e4f0
Bump BoringSSL and/or OpenSSL in CI (#10214)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-20 00:15:19 +00:00
dependabot[bot]
a5973d1453
Bump openssl-sys from 0.9.98 to 0.9.99 in /src/rust (#10213)
Bumps [openssl-sys](https://github.com/sfackler/rust-openssl) from 0.9.98 to 0.9.99.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-sys-v0.9.98...openssl-sys-v0.9.99)

---
updated-dependencies:
- dependency-name: openssl-sys
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-20 00:10:22 +00:00
dependabot[bot]
35dedf46d9
Bump ruff from 0.1.13 to 0.1.14 (#10212)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.1.13 to 0.1.14.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.13...v0.1.14)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 23:09:31 +00:00
dependabot[bot]
74273aba09
Bump markupsafe from 2.1.3 to 2.1.4 (#10211)
Bumps [markupsafe](https://github.com/pallets/markupsafe) from 2.1.3 to 2.1.4.
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/2.1.4/CHANGES.rst)
- [Commits](https://github.com/pallets/markupsafe/compare/2.1.3...2.1.4)

---
updated-dependencies:
- dependency-name: markupsafe
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 23:07:17 +00:00
dependabot[bot]
23acc7f8df
Bump smallvec from 1.13.0 to 1.13.1 in /src/rust (#10210)
Bumps [smallvec](https://github.com/servo/rust-smallvec) from 1.13.0 to 1.13.1.
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](https://github.com/servo/rust-smallvec/compare/v1.13.0...v1.13.1)

---
updated-dependencies:
- dependency-name: smallvec
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 23:04:44 +00:00
dependabot[bot]
a65879560e
Bump smallvec from 1.12.0 to 1.13.0 in /src/rust (#10206)
Bumps [smallvec](https://github.com/servo/rust-smallvec) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](https://github.com/servo/rust-smallvec/compare/v1.12.0...v1.13.0)

---
updated-dependencies:
- dependency-name: smallvec
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 08:57:04 -03:00
pyca-boringbot[bot]
17404b61fc
Bump BoringSSL and/or OpenSSL in CI (#10205)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-19 01:26:57 +00:00
Hacksawfred3232
bd0a0648a8
Added warning about SHA1 being used for response signing in ocsp.rst (#10204)
* Update ocsp.rst

Added warning about SHA1 being used for sign()

* Update ocsp.rst

Fixed spelling issues, at least according to en-GB dictionary.

* Update ocsp.rst

Spell checker didn't catch "algorithim" somehow.

* Update ocsp.rst

Attempting to rephrase the warning.

* Update ocsp.rst

Removing rouge space.
2024-01-19 01:26:45 +00:00
dependabot[bot]
82f715cfb0
Bump pkg-config from 0.3.28 to 0.3.29 in /src/rust (#10202)
Bumps [pkg-config](https://github.com/rust-lang/pkg-config-rs) from 0.3.28 to 0.3.29.
- [Changelog](https://github.com/rust-lang/pkg-config-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/pkg-config-rs/compare/0.3.28...0.3.29)

---
updated-dependencies:
- dependency-name: pkg-config
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 01:26:33 +00:00
pyca-boringbot[bot]
1bf2d29b40
Bump x509-limbo and/or wycheproof in CI (#10201)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-18 00:35:02 +00:00
pyca-boringbot[bot]
dcd964abbf
Bump BoringSSL and/or OpenSSL in CI (#10200)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-17 19:20:41 -05:00
William Woodruff
406b771ff0
fetch-vectors: change repo for x509-limbo (#10199)
* fetch-vectors: change repo for x509-limbo

Signed-off-by: William Woodruff <william@trailofbits.com>

* workflows: trailofbits -> C2SP

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>
2024-01-17 19:42:12 +00:00
Alex Gaynor
895cddf591
Consistently use EllipticCurve instances in various places (#10189) 2024-01-17 13:03:56 -03:00
Alex Gaynor
376a266cef
Special-case installation of vectors in local nox (#10190)
This saves roughly a second, but makes getting feedback much more responsive.
2024-01-17 12:52:07 -03:00
dependabot[bot]
1f8fbed124
Bump actions/cache from 3.3.3 to 4.0.0 (#10197)
Bumps [actions/cache](https://github.com/actions/cache) from 3.3.3 to 4.0.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](e12d46a63a...13aacd865c)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-17 07:34:04 -05:00
pyca-boringbot[bot]
b740f5a198
Bump x509-limbo and/or wycheproof in CI (#10195)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-17 00:31:05 +00:00
pyca-boringbot[bot]
41e157ef86
Bump BoringSSL and/or OpenSSL in CI (#10194)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-17 00:15:46 +00:00
pyca-boringbot[bot]
4b5be7b003
Bump BoringSSL and/or OpenSSL in CI (#10192)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-16 00:15:35 +00:00
Alex Gaynor
9409479c9a
fixes #10187 -- handle passing a curve class when generating an EC key (#10188) 2024-01-15 15:48:49 -02:00
pyca-boringbot[bot]
00a94b0065
Bump BoringSSL and/or OpenSSL in CI (#10186)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-15 00:15:09 +00:00
Alex Gaynor
0f69ce5e8f
Use flit instead of setuptools for vectors (#10174)
Its much faster
2024-01-14 21:00:06 -03:00
Alex Gaynor
ad4ba0af95
Develop a local nox target (#10173)
This formats code, runs linters, and tests.

And it does these in an order that's optimized for fast local feedback
2024-01-14 20:43:55 -02:00
dependabot[bot]
6d0fb983a5
Bump sphinxcontrib-htmlhelp from 2.0.4 to 2.0.5 (#10185)
Bumps [sphinxcontrib-htmlhelp](https://github.com/sphinx-doc/sphinxcontrib-htmlhelp) from 2.0.4 to 2.0.5.
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-htmlhelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-htmlhelp/blob/2.0.5/CHANGES)
- [Commits](https://github.com/sphinx-doc/sphinxcontrib-htmlhelp/compare/2.0.4...2.0.5)

---
updated-dependencies:
- dependency-name: sphinxcontrib-htmlhelp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-14 14:48:15 +00:00
dependabot[bot]
a2cba66c31
Bump sphinxcontrib-qthelp from 1.0.6 to 1.0.7 (#10180)
Bumps [sphinxcontrib-qthelp](https://github.com/sphinx-doc/sphinxcontrib-qthelp) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-qthelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-qthelp/blob/1.0.7/CHANGES)
- [Commits](https://github.com/sphinx-doc/sphinxcontrib-qthelp/compare/1.0.6...1.0.7)

---
updated-dependencies:
- dependency-name: sphinxcontrib-qthelp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-14 14:44:03 +00:00
dependabot[bot]
5e10a750b7
Bump smallvec from 1.11.2 to 1.12.0 in /src/rust (#10179)
Bumps [smallvec](https://github.com/servo/rust-smallvec) from 1.11.2 to 1.12.0.
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](https://github.com/servo/rust-smallvec/compare/v1.11.2...v1.12.0)

---
updated-dependencies:
- dependency-name: smallvec
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-14 14:27:34 +00:00
dependabot[bot]
fc9107ce34
Bump sphinxcontrib-serializinghtml from 1.1.9 to 1.1.10 (#10184)
Bumps [sphinxcontrib-serializinghtml](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml) from 1.1.9 to 1.1.10.
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml/blob/master/CHANGES)
- [Commits](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml/compare/1.1.9...1.1.10)

---
updated-dependencies:
- dependency-name: sphinxcontrib-serializinghtml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-14 14:27:20 +00:00
dependabot[bot]
e0359fa640
Bump ruff from 0.1.12 to 0.1.13 (#10183)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.1.12 to 0.1.13.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.12...v0.1.13)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-14 14:27:10 +00:00
dependabot[bot]
ca99725078
Bump sphinxcontrib-devhelp from 1.0.5 to 1.0.6 (#10181)
Bumps [sphinxcontrib-devhelp](https://github.com/sphinx-doc/sphinxcontrib-devhelp) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-devhelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-devhelp/blob/1.0.6/CHANGES)
- [Commits](https://github.com/sphinx-doc/sphinxcontrib-devhelp/compare/1.0.5...1.0.6)

---
updated-dependencies:
- dependency-name: sphinxcontrib-devhelp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-14 14:27:04 +00:00
dependabot[bot]
c8937e8003
Bump sphinxcontrib-applehelp from 1.0.7 to 1.0.8 (#10182)
Bumps [sphinxcontrib-applehelp](https://github.com/sphinx-doc/sphinxcontrib-applehelp) from 1.0.7 to 1.0.8.
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-applehelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-applehelp/blob/master/CHANGES)
- [Commits](https://github.com/sphinx-doc/sphinxcontrib-applehelp/compare/1.0.7...1.0.8)

---
updated-dependencies:
- dependency-name: sphinxcontrib-applehelp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-14 14:26:54 +00:00
pyca-boringbot[bot]
cb493187e0
Bump BoringSSL and/or OpenSSL in CI (#10175)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-14 00:15:43 +00:00
Alex Gaynor
13fc913414
Remove Python bindings to EVP_AEAD (#10171) 2024-01-13 07:25:49 -03:00
Alex Gaynor
94e5167a12
Migrate ChaCha20Poly1305 AEAD to Rust (#9399)
* Migrate ChaCha20Poly1305 AEAD to Rust

* Remove FixedPool
2024-01-12 22:16:39 -03:00
pyca-boringbot[bot]
94d2275b75
Bump BoringSSL and/or OpenSSL in CI (#10170)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-12 19:16:11 -05:00
William Woodruff
a1ed534adb
docs/x509: fix verification example (#10169)
* docs/x509: fix verification example

Signed-off-by: William Woodruff <william@trailofbits.com>

* x509/verification: doctest

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>
2024-01-12 21:05:59 +00:00
dependabot[bot]
113fca9225
Bump actions/cache from 3.3.2 to 3.3.3 (#10164)
Bumps [actions/cache](https://github.com/actions/cache) from 3.3.2 to 3.3.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](704facf57e...e12d46a63a)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-12 12:55:51 +00:00
dependabot[bot]
17583be43c
Bump id from 1.2.1 to 1.3.0 in /.github/requirements (#10166)
Bumps [id](https://github.com/di/id) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/di/id/releases)
- [Changelog](https://github.com/di/id/blob/main/CHANGELOG.md)
- [Commits](https://github.com/di/id/compare/v1.2.1...v1.3.0)

---
updated-dependencies:
- dependency-name: id
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-12 12:51:39 +00:00
dependabot[bot]
2bae113d7c
Bump ruff from 0.1.11 to 0.1.12 (#10165)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.1.11 to 0.1.12.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.11...v0.1.12)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-12 12:51:11 +00:00
dependabot[bot]
53f3fdaa61
Bump base64 from 0.21.6 to 0.21.7 in /src/rust (#10167)
Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.21.6 to 0.21.7.
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/marshallpierce/rust-base64/compare/v0.21.6...v0.21.7)

---
updated-dependencies:
- dependency-name: base64
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-12 12:48:35 +00:00
Alex Gaynor
ba2bef6dac
Silence new clippy false-positive (#10168) 2024-01-12 12:37:43 +00:00
pyca-boringbot[bot]
b1810f3686
Bump x509-limbo and/or wycheproof in CI (#10163)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-01-12 00:33:42 +00:00