Commit graph

2036 commits

Author SHA1 Message Date
Alex Gaynor
9aeabd9d2a DigiCert's root is now available over https (#4664) 2018-12-30 14:28:19 -06:00
Marti Raudsepp
824155743f Remove spaces from RFC 4514 strings for better compliance (#4643) (#4646)
RFC 4514 does not explicitly allow whitespace between separators:
https://tools.ietf.org/html/rfc4514

Reported-by: David Arnold <dar@xoe.solutions>
2018-12-18 07:26:40 +08:00
Paul Kehrer
89e1e34d97 deprecate old from_encoded_point (#4640) 2018-12-11 21:35:27 -05:00
Paul Kehrer
4c5740a674 Compressed point support (#4629)
* compressed point support

* refactor to use oct2point directly

* small docs change

* remove deprecation for the moment and a bit of review feedback

* no backend arg, implicitly import it

* missed a spot

* double oops

* remove superfluous call

* use refactored method

* use vector file

* one last item
2018-12-11 19:08:27 -05:00
Paul Kehrer
489bae980a add compressed point EC vectors (#4637) 2018-12-10 22:26:48 -05:00
Paul Kehrer
3c68250ad9 allow bytes-like for key/iv/data for symmetric encryption (#4621)
* allow bytearrays for key/iv for symmetric encryption

* bump pypy/cffi requirements

* update docs, fix some tests

* old openssl is naught but pain

* revert a typo

* use trusty for old pypy

* better error msg again

* restore match
2018-12-09 23:13:31 -05:00
Paul Kehrer
c2d16370f0 make the same doc changes to DH as we did for ECDH (#4631) 2018-12-09 18:18:09 -05:00
Alex Gaynor
31af768dc2 Update link to MS docs (#4632) 2018-12-09 13:03:32 +08:00
Alex Gaynor
c73367a61c Jenkins is fixed! (#4630) 2018-12-09 11:18:07 +08:00
André Almeida
5bc3bf7d36 Adds a more descriptive error msg for wrong wrapping (#4504)
* PoC code for check PEM wrap

* Remove PoC check wrap code

* Add PEM file info to FAQ

* Add FAQ/PEM link in exception message

* Fix flake8 style issues

* refactor, update language

* it's really amazing how bad the spell checker is

* review feedback

* change to etc
2018-12-08 20:53:10 -05:00
Marti Raudsepp
c3d38b5d80 Add RFC 4514 Distinguished Name formatting for Name, RDN and NameAttribute (#4304) 2018-12-08 09:26:07 +08:00
Paul Kehrer
7e422821b9 remove idna as a primary dependency (#4624)
* remove idna as a primary dependency

* empty commit

* dynamodb test fix (thanks to Matt Bullock)

* review feedback
2018-12-06 22:43:38 -05:00
Paul Kehrer
eb3e2e0d73 IssuingDistributionPoint support (parse only) (#4552)
* IssuingDistributionPoint support

h/t to Irina Renteria for the initial work here

* python 2 unfortunately still exists

* py2 repr

* typo caught by flake8

* add docs

* review feedback

* reorder args, other fixes

* use the alex name

* add changelog
2018-11-30 23:15:20 -05:00
Paul Kehrer
e4e7b89fb6 PKCS12 Basic Parsing (#4553)
* PKCS12 parsing support

* running all the tests is so gauche

* rename func

* various significant fixes

* dangerous idiot here

* move pkcs12

* docs updates

* a bit more prose
2018-11-28 22:51:38 -05:00
Paul Kehrer
8f3d259bd8 add ed448 test vectors (#4608) 2018-11-24 09:30:39 -06:00
Paul Kehrer
6f88e01af8 X448 support (#4580)
* x448 support

This work was originally authored by derwolfe

* update docs to have a more useful derived key length

* error if key is not a valid length in from_public_bytes

* one more

* switch to using evp_pkey_keygen_gc for x448 keygen

* review feedback

* switch to using evp_pkey_derive

* nit fix
2018-11-22 20:44:37 -06:00
Paul Kehrer
3065e16bcc add sha3 support (#4573)
* add sha3 support

* missed versionadded

* add prose, remove block_size
2018-11-22 09:42:42 -06:00
Paul Kehrer
d67fa8251f add SHA512/224 and SHA512/256 support (#4575)
* add SHA512/224 and SHA512/256 support

* add missing docs
2018-11-12 21:41:26 -05:00
Paul Kehrer
1cd33bc4f0 x448 test vectors (#4576) 2018-11-12 08:18:07 -05:00
Paul Kehrer
a30013b4dc add a few more EC OIDs (#4572)
* add a few more EC OIDs

* spaces matter
2018-11-11 23:07:54 -05:00
Paul Kehrer
98420eac45 another pkcs12 vector (#4557)
* another pkcs12 vector

also fixed the pathing to be consistent in the docs for PKCS12 vectors

* add a cert with no key pkcs12 as well
2018-11-04 10:19:22 -05:00
Paul Kehrer
94c13bb5de additional pkcs12 test vector (#4554) 2018-11-03 11:30:57 -04:00
Paul Kehrer
95af1e391b add EC OIDs (#4435)
* add EC OIDs

* move ec oid docs to bottom
2018-10-30 21:23:29 -04:00
Paul Kehrer
f5ab0deff9 add pkcs12 test vectors (#4535)
* add pkcs12 test vectors

* add more explanatino
2018-10-30 00:48:53 -04:00
Alex Gaynor
84f6c1b206 Whitelist NTT for linkcheck (#4547) 2018-10-30 11:18:41 +08:00
Paul Kehrer
328c314d5b add issuingDistributionPoint vectors (#4537) 2018-10-29 00:05:31 -04:00
Paul Kehrer
e617c5a047 OCSP response builder (#4485)
* ocsp response builder

* better prose

* review changes
2018-10-28 17:36:34 -04:00
Paul Kehrer
6e756aec9c add IDP OID and docs (#4533) 2018-10-28 14:07:40 -04:00
Paul Kehrer
80a0ab454f change ECDH documentation to show both classical ECDH and ECDHE (#4530) 2018-10-28 14:07:16 -04:00
Paul Kehrer
ece7442a50 reorder curves to put binary (SECT) curves down at the bottom (#4529)
also add a disclaimer that you shouldn't use them
2018-10-28 14:06:02 -04:00
Paul Kehrer
03eab03b88 add a new SCT vector (#4528)
* add a new SCT vector

* ridiculous
2018-10-27 22:12:49 -04:00
Alex Gaynor
2d9f8e88cb HTTPS one last URL (#4522) 2018-10-25 11:40:58 +08:00
Alex Gaynor
9569f5cbde OpenPGP's website is also HTTPS! (#4518) 2018-10-24 11:47:29 +08:00
Alex Gaynor
df57af0c07 oss-security page is https too! (#4517) 2018-10-24 10:52:53 +08:00
Alex Gaynor
5e5990abcc Colin's website went HTTPS! (#4515) 2018-10-24 09:34:44 +08:00
Paul Kehrer
a9b4f86de8 next_update is not a required field on OCSP responses (#4513) 2018-10-23 20:58:07 -04:00
Alex Gaynor
f6f2d7ebd5 Another URL goes https! (#4512) 2018-10-24 08:39:19 +08:00
Alex Gaynor
a9feff3d43 Update the linkcheck ignores (#4511)
* Update the linkcheck ignores

* Hack?

* Ok, this should work
2018-10-24 07:59:55 +08:00
André Almeida
8a35a20045 Enhance info on pip requirements intallation (#4499)
* Enhance info on pip requirements intallation

* Remove virtualenv files from remote

* Fix "pacakges" typo

* Removing trailling whitespaces
2018-10-19 10:20:03 +08:00
Paul Kehrer
838bc4a95c simplify some language (#4495)
* simplify some language

* Update reference.rst

* wrap

* remove trailing whitespace

the github web editor is bad and should feel bad
2018-10-10 00:02:55 -04:00
Alex Gaynor
6460228b46 Style nits for docs (#4494) 2018-10-10 11:03:55 +08:00
g_goessel
16f746f52a Add a tutorial explaining how to check the signature of a certificate (#4478) 2018-10-10 10:13:41 +08:00
Paul Kehrer
788b859efd OCSP response serialization (#4482)
* support OCSP response serialization

* empty commit, good times
2018-10-06 23:07:14 -04:00
Paul Kehrer
0c07580a21 support extensions in the OCSP request builder (#4481)
* support extensions in the OCSP request builder

* cover a missed branch

* refactor to use new func

* review feedback
2018-10-06 22:10:09 -04:00
Paul Kehrer
b8db668111 add OCSP basic response extension parsing (#4479)
* add OCSP basic response extension parsing

Just nonce for now. This does not support SINGLERESP extension parsing.

* also raises on extensions for non-successful

* empty commit
2018-10-06 15:44:30 -04:00
Paul Kehrer
a07de31096 support OCSP response parsing (#4452)
* support OCSP response parsing

* move the decorator to make pep8 happy

* add some missing docs

* review feedback

* more review feedback
2018-10-01 19:54:31 -04:00
Paul Kehrer
edfedc135c a few docs fixes and language improvements (#4472) 2018-09-14 18:24:20 -04:00
Paul Kehrer
09403100de OCSP request extension parsing (#4464)
* add OCSP request parsing support with OCSPNonce

* add docs

* reprs man

* make extensions a cached property
2018-09-09 22:57:21 -04:00
Paul Kehrer
3cc0079024 add OCSP request with a request extension (nonce) (#4462) 2018-09-07 09:06:17 -04:00
Paul Kehrer
26c425dd74 document that OCSPResponse attributes can raise valuerror (#4453) 2018-09-01 15:58:26 -05:00