Commit graph

9581 commits

Author SHA1 Message Date
Alex Gaynor
7ff729ecf2
Switch from flake8 to ruff (#7920)
It's more than 60x faster.
2022-12-21 09:44:47 +07:00
pyca-boringbot[bot]
4868142f41
Bump BoringSSL and/or OpenSSL in CI (#7919)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-21 00:22:05 +00:00
David Benjamin
73896bef1f
Remove binding for X509_STORE_get_get_issuer (#7918)
This was added alongside X509_STORE_set_get_issuer in
21ef4080ec. It makes sense to want to
override issuer lookup, but I've never seen a valid use case for
querying the callbacks. If you're trying to get at the function that was
already configured, you presumably already know it. (And if you don't,
it's not safe to call because an arbitrary callback may have been
written to only be usable in particular contexts.)
2022-12-20 18:18:51 -05:00
dependabot[bot]
1579bfb869
Bump syn from 1.0.105 to 1.0.107 in /src/rust (#7915)
Bumps [syn](https://github.com/dtolnay/syn) from 1.0.105 to 1.0.107.
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](https://github.com/dtolnay/syn/compare/1.0.105...1.0.107)

---
updated-dependencies:
- dependency-name: syn
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 12:39:44 +00:00
dependabot[bot]
6b6c73cde2
Bump proc-macro-hack from 0.5.19 to 0.5.20+deprecated in /src/rust (#7917)
Bumps [proc-macro-hack](https://github.com/dtolnay/proc-macro-hack) from 0.5.19 to 0.5.20+deprecated.
- [Release notes](https://github.com/dtolnay/proc-macro-hack/releases)
- [Commits](https://github.com/dtolnay/proc-macro-hack/compare/0.5.19...0.5.20)

---
updated-dependencies:
- dependency-name: proc-macro-hack
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 12:39:42 +00:00
dependabot[bot]
cc26759833
Bump proc-macro2 from 1.0.47 to 1.0.49 in /src/rust (#7916)
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.47 to 1.0.49.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.47...1.0.49)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 12:39:31 +00:00
dependabot[bot]
eaf6c3c69c
Bump link-cplusplus from 1.0.7 to 1.0.8 in /src/rust (#7913)
Bumps [link-cplusplus](https://github.com/dtolnay/link-cplusplus) from 1.0.7 to 1.0.8.
- [Release notes](https://github.com/dtolnay/link-cplusplus/releases)
- [Commits](https://github.com/dtolnay/link-cplusplus/compare/1.0.7...1.0.8)

---
updated-dependencies:
- dependency-name: link-cplusplus
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 12:28:07 +00:00
dependabot[bot]
2e81f899aa
Bump cxx-build from 1.0.83 to 1.0.85 in /src/rust (#7914)
Bumps [cxx-build](https://github.com/dtolnay/cxx) from 1.0.83 to 1.0.85.
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](https://github.com/dtolnay/cxx/compare/1.0.83...1.0.85)

---
updated-dependencies:
- dependency-name: cxx-build
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 12:28:06 +00:00
Alex Gaynor
6c0009aa26
new libressl release (#7911) 2022-12-20 00:55:37 +00:00
dependabot[bot]
b34129c9ec
Bump cxx from 1.0.83 to 1.0.85 in /src/rust (#7906)
Bumps [cxx](https://github.com/dtolnay/cxx) from 1.0.83 to 1.0.85.
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](https://github.com/dtolnay/cxx/compare/1.0.83...1.0.85)

---
updated-dependencies:
- dependency-name: cxx
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-19 13:05:45 +00:00
dependabot[bot]
b0e2066dcd
Bump unicode-ident from 1.0.5 to 1.0.6 in /src/rust (#7910)
Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](https://github.com/dtolnay/unicode-ident/compare/1.0.5...1.0.6)

---
updated-dependencies:
- dependency-name: unicode-ident
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-19 13:05:35 +00:00
dependabot[bot]
9fa9f27a81
Bump scratch from 1.0.2 to 1.0.3 in /src/rust (#7909)
Bumps [scratch](https://github.com/dtolnay/scratch) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/dtolnay/scratch/releases)
- [Commits](https://github.com/dtolnay/scratch/compare/1.0.2...1.0.3)

---
updated-dependencies:
- dependency-name: scratch
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-19 07:43:52 -05:00
dependabot[bot]
fce43ecb75
Bump quote from 1.0.21 to 1.0.23 in /src/rust (#7908)
Bumps [quote](https://github.com/dtolnay/quote) from 1.0.21 to 1.0.23.
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](https://github.com/dtolnay/quote/compare/1.0.21...1.0.23)

---
updated-dependencies:
- dependency-name: quote
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-19 12:43:14 +00:00
dependabot[bot]
b30b4a28b3
Bump unindent from 0.1.10 to 0.1.11 in /src/rust (#7907)
Bumps [unindent](https://github.com/dtolnay/indoc) from 0.1.10 to 0.1.11.
- [Release notes](https://github.com/dtolnay/indoc/releases)
- [Commits](https://github.com/dtolnay/indoc/compare/0.1.10...0.1.11)

---
updated-dependencies:
- dependency-name: unindent
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-19 12:43:10 +00:00
Mathias Ertl
11c83b0dd9
document POLICY_MAPPING and SUBJECT_DIRECTORY_ATTRIBUTES (#7904) 2022-12-17 16:02:51 +00:00
pyca-boringbot[bot]
306b418d0e
Bump BoringSSL and/or OpenSSL in CI (#7902)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-17 01:07:24 +00:00
Alex Gaynor
2228806c9e
put binding back that pyOpenSSL just started using (#7903) 2022-12-17 08:48:19 +08:00
pyca-boringbot[bot]
a49f36812e
Bump BoringSSL and/or OpenSSL in CI (#7900)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-16 00:25:03 +00:00
dependabot[bot]
d2fead7042
Bump cc from 1.0.77 to 1.0.78 in /src/rust (#7899)
Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.0.77 to 1.0.78.
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Commits](https://github.com/rust-lang/cc-rs/compare/1.0.77...1.0.78)

---
updated-dependencies:
- dependency-name: cc
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-15 08:03:58 -05:00
pyca-boringbot[bot]
42f7f5f8dd
Bump BoringSSL and/or OpenSSL in CI (#7898)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-15 00:19:52 +00:00
Alex Gaynor
7e33b0e773
Bump OpenSSL/BoringSSL and adapt for OpenSSL RSA bleichenbacher mitigation (#7895)
* Bump BoringSSL and/or OpenSSL in CI

* Attempt to work-around wycheproof tests

Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-14 15:50:06 +09:00
dependabot[bot]
00e93c8631
Bump parking_lot_core from 0.8.5 to 0.8.6 in /src/rust (#7897)
Bumps [parking_lot_core](https://github.com/Amanieu/parking_lot) from 0.8.5 to 0.8.6.
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Amanieu/parking_lot/compare/core-0.8.5...core-0.8.6)

---
updated-dependencies:
- dependency-name: parking_lot_core
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 12:39:57 +00:00
dependabot[bot]
254e80d65a
Bump actions/checkout from 3.1.0 to 3.2.0 (#7896)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 12:14:58 +00:00
Alex Gaynor
a4c750adda
ignore speakerdeck on linkcheck (#7893) 2022-12-12 22:40:25 +00:00
pyca-boringbot[bot]
ded83199c0
Bump BoringSSL and/or OpenSSL in CI (#7890)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-11 22:23:49 -05:00
pyca-boringbot[bot]
05baf6d17b
Bump BoringSSL and/or OpenSSL in CI (#7889)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-10 00:18:56 +00:00
dependabot[bot]
b1213f7a3d
Bump actions/setup-python from 4.3.0 to 4.3.1 (#7888)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.3.0 to 4.3.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4.3.0...v4.3.1)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-09 07:18:59 -05:00
pyca-boringbot[bot]
13988f580f
Bump BoringSSL and/or OpenSSL in CI (#7884)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-09 04:07:57 +00:00
Paul Kehrer
8fc5cfa6bb
fixes for tox4 (#7887)
* possibly fix tox4

* add a missing env we need to allow

* lol how did this stuff ever work
2022-12-08 22:34:25 -05:00
pyca-boringbot[bot]
56ca71863d
Bump BoringSSL and/or OpenSSL in CI (#7882)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-07 00:21:27 +00:00
pyca-boringbot[bot]
c15e99ca94
Bump BoringSSL and/or OpenSSL in CI (#7881)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-06 00:23:36 +00:00
Alex Gaynor
f6f504e111
remove unnecessary lifetime (#7880)
clippy on nightly complains about it
2022-12-06 00:17:33 +00:00
dependabot[bot]
cb45eba45a
Bump dessant/lock-threads from 3.0.0 to 4.0.0 (#7879)
Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 3.0.0 to 4.0.0.
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md)
- [Commits](e460dfeb36...c1b35aecc5)

---
updated-dependencies:
- dependency-name: dessant/lock-threads
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-05 07:50:46 -08:00
William Woodruff
7b79a46df1
x509: add load_pem_x509_certificates (#7878)
* x509: add `load_pem_x509_certificates`

This behaves similarly to `load_pem_x509_certificate`, except that it
returns a list of loaded certificates instead of just the first X.509
certificate.

It raises if the input contains no PEM-encoded certificates, or if PEM
or certificate parsing fail.

Signed-off-by: William Woodruff <william@trailofbits.com>

* tests/x509: blacken

Signed-off-by: William Woodruff <william@trailofbits.com>

* Update docs/x509/reference.rst

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

* tests/x509: assert each item in the list is actually a certificate

Signed-off-by: William Woodruff <william@trailofbits.com>

* bindings: expose `load_pem_x509_certificates` in `x509.pyi`

Signed-off-by: William Woodruff <william@trailofbits.com>

* tests/x509: test the structure of each cert a bit

This has the transitive effect of establishing a fixed order.

Signed-off-by: William Woodruff <william@trailofbits.com>

* CHANGELOG: record changes

Signed-off-by: William Woodruff <william@trailofbits.com>

* docs: add PEM to spellcheck allowlist

Signed-off-by: William Woodruff <william@trailofbits.com>

* docs/x509: document expected param

Signed-off-by: William Woodruff <william@trailofbits.com>

Signed-off-by: William Woodruff <william@trailofbits.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2022-12-05 02:20:11 +00:00
Paul Kehrer
15e6acf4e3
a few more mypy flags and fixes (#7877) 2022-12-04 23:38:51 +00:00
Alex Gaynor
1e9513ec7c
Annotate a few more functions (#7876) 2022-12-04 14:40:34 -08:00
pyca-boringbot[bot]
5302b2ad58
Bump BoringSSL and/or OpenSSL in CI (#7875)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-04 00:22:48 +00:00
dependabot[bot]
28d7fe3bd0
Bump libc from 0.2.137 to 0.2.138 in /src/rust (#7874)
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.137 to 0.2.138.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.137...0.2.138)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-03 05:16:20 +00:00
dependabot[bot]
8fcc2526d3
Bump cxx-build from 1.0.82 to 1.0.83 in /src/rust (#7873)
Bumps [cxx-build](https://github.com/dtolnay/cxx) from 1.0.82 to 1.0.83.
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](https://github.com/dtolnay/cxx/compare/1.0.82...1.0.83)

---
updated-dependencies:
- dependency-name: cxx-build
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-03 05:09:04 +00:00
dependabot[bot]
0170ca91c2
Bump cxx from 1.0.82 to 1.0.83 in /src/rust (#7872)
Bumps [cxx](https://github.com/dtolnay/cxx) from 1.0.82 to 1.0.83.
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](https://github.com/dtolnay/cxx/compare/1.0.82...1.0.83)

---
updated-dependencies:
- dependency-name: cxx
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-03 05:01:52 +00:00
pyca-boringbot[bot]
3133cd7571
Bump BoringSSL and/or OpenSSL in CI (#7871)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-03 00:18:21 +00:00
pyca-boringbot[bot]
2066c7ffff
Bump BoringSSL and/or OpenSSL in CI (#7869)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-12-02 00:19:29 +00:00
dependabot[bot]
420075c4fe
Bump syn from 1.0.104 to 1.0.105 in /src/rust (#7867)
Bumps [syn](https://github.com/dtolnay/syn) from 1.0.104 to 1.0.105.
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](https://github.com/dtolnay/syn/compare/1.0.104...1.0.105)

---
updated-dependencies:
- dependency-name: syn
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-01 12:35:04 +00:00
Alex Gaynor
ab2aff3b43
be careful to only publish wheels from the right CI run (#7865) 2022-11-30 19:40:48 -06:00
pyca-boringbot[bot]
6909cda39c
Bump BoringSSL and/or OpenSSL in CI (#7866)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-11-30 20:28:16 -05:00
pyca-boringbot[bot]
622c98349e
Bump BoringSSL and/or OpenSSL in CI (#7864)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-11-30 00:25:05 +00:00
pyca-boringbot[bot]
21225b4cbb
Bump BoringSSL and/or OpenSSL in CI (#7862)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2022-11-29 00:23:02 +00:00
Alex Gaynor
5a00c3389f
use the correct param name in stale action (#7861) 2022-11-28 06:31:10 -07:00
dependabot[bot]
0bd7ca9a46
Bump syn from 1.0.103 to 1.0.104 in /src/rust (#7860)
Bumps [syn](https://github.com/dtolnay/syn) from 1.0.103 to 1.0.104.
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](https://github.com/dtolnay/syn/compare/1.0.103...1.0.104)

---
updated-dependencies:
- dependency-name: syn
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-28 12:28:32 +00:00
dependabot[bot]
39b96a1430
Bump peter-evans/create-pull-request from 4.2.2 to 4.2.3 (#7859)
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 4.2.2 to 4.2.3.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](331d02c7e2...2b011faafd)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-28 12:16:25 +00:00