Commit graph

7781 commits

Author SHA1 Message Date
Alex Gaynor
b94706416a
Update README for the move to github actions (#5160) 2020-03-30 20:17:01 -05:00
Alex Gaynor
005360f901
Move macOS CI to Github Actions (#5155) 2020-03-29 17:34:22 -05:00
Paul Kehrer
f0a14a5c04
twisted is dropping 2.7 support. test on 3.7 (3.8 is not supported yet) (#5159) 2020-03-29 16:23:51 -04:00
Maciej Jurczak
62287ae183
Fixed error message in AES-CCM data length validation to reflect the error reason more accurately. (#5157) 2020-03-28 12:41:40 -04:00
Alex Gaynor
0833e93cd2
Run twisted under a newer openssl (#5158)
* Run twisted under a newer openssl

* yet newer
2020-03-28 10:49:29 -05:00
Paul Kehrer
2cc6bd61ba
reorder 2.9 changelog, add a missing entry (#5156) 2020-03-21 22:41:20 -04:00
Marko Kreen
757454a9b0
Fix silly linter problem with CHANGELOG (#5150)
This line triggers warning:

	CHANGELOG.rst:24: D001 Line too long

but only when an item is added after it.
Eg. "* Foo" is enough to trigger it.
2020-03-21 19:41:05 -05:00
Alex Gaynor
2c4fccceff
Extra paranoia in the release script (#5152) 2020-03-21 19:39:29 -05:00
Alex Gaynor
00651a7eb6
Use openssl from infra master (#5154) 2020-03-21 19:39:10 -05:00
Alex Gaynor
6c790b6199
Update openssl-release.md (#5153)
* Update openssl-release.md

* Update openssl-release.md
2020-03-21 19:38:37 -05:00
Alex Gaynor
6de73eebf7
Add required key to wheel-builder config (#5148) 2020-03-21 15:20:20 -05:00
Alex Gaynor
937a7daf1f
Move wheel builer to github actions (#5147) 2020-03-21 14:14:46 -05:00
Alex Gaynor
1ac825f28d
First pass at moving windows CI to github actions (#5145)
* First pass at moving windows CI to github actions

* Install coverage

* Remove bonus http request
2020-03-21 13:38:45 -05:00
Alex Gaynor
0ecb4c5644
linkcheck: remove domain that fixed it's tls from ignore (#5144) 2020-03-19 22:34:30 -05:00
Andrea De Pasquale
87b2749c52
Allow NameAttribute.value to be an empty string (#5109)
* Allow NameAttribute.value to be an empty string

RFC 4514 https://tools.ietf.org/html/rfc4514 does not mention that
"AttributeValue" can not be an empty (zero-length) string.

Fixes #5106

* reverse order to match fix from another PR

Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
2020-03-19 15:23:35 -04:00
Alex Gaynor
416d6856f1
Fixed linkcheck (#5142)
* Fixed linkcheck

* linkcheck
2020-03-19 14:18:04 -05:00
Alex Gaynor
7f19d61e4f
Fixed issue template for manylinux1 structure (#5140) 2020-03-19 12:45:43 -05:00
Alex Gaynor
e320adfe3e
Fix several CI breakages (#5138)
* Replace dead link

* Explicitly run for all PRs

* Update azure-pipelines.yml

* Update wheel-builder.yml
2020-03-19 11:54:34 -05:00
Alex Gaynor
382253ea0e
Update azure images for their deprecation of 10.13 (#5132) 2020-03-02 19:57:28 -08:00
Alex Gaynor
2ca0fe12e3
Linkify RFC in changelog (#5131) 2020-03-02 18:57:44 -08:00
Thomas Erbesdobler
ed71c5cc07
Reversed the order of RDNs in x509.Name.rfc4514_string() (#5120)
RFC4514 requires in section 2.1 that RDNs are converted to string
representation in reversed order.
2020-03-02 21:26:07 -05:00
Alex Gaynor
d12fd8d1c2
Update pip before installing virtualenv in travis (#5121) 2020-02-15 17:43:37 -06:00
Alex Gaynor
c0dbbb52fb Refs #5075 -- use ecdsa_*.json from wycheproof (#5099) 2020-01-12 22:42:21 -05:00
Alex Gaynor
c8c78bb4c5 Refs #5075 -- use dsa_*.json from wycheproof (#5098) 2020-01-12 21:33:25 -05:00
Alex Gaynor
f95abfeb61 Refs #5075 -- use rsa_signature_*.json from wycheproof (#5078)
* Refs #5075 -- use rsa_signature_*.json from wycheproof

* for azure
2020-01-12 19:35:51 -05:00
Alex Gaynor
fdd80ec89a Refs #5075 -- use x448_test.json from wycheproof (#5077)
* Refs #5075 -- use x448_test.json from wycheproof

* Fixed test

* crypto libraries from people who can't math, it's fine

* Skip teh weirdo 57 byte public keys
2020-01-12 19:35:16 -05:00
Mads Jensen
f89ce40b62 Replace legacy file handling with a context manager. (#5092)
* Replace legacy file handling with a context manager.

* flake8 fix

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2020-01-12 17:32:21 -05:00
Mads Jensen
a849f40556 Use literals for collections and comprehensions. (#5091) 2020-01-12 17:29:17 -05:00
Mads Jensen
1d6ef10910 Updates Python version in README (#5094) 2020-01-12 13:36:56 -05:00
Alex Gaynor
f956ab4086 Update for new alpine release (#5097) 2020-01-12 13:03:31 -05:00
Alexander Grund
085382fb17 Add pthread linking on non-win32 (#5086)
Required to link in static part of pthread, e.g. pthread_atfork
Fixes https://github.com/pyca/cryptography/issues/5084
2019-12-23 18:03:13 -05:00
Paul Kehrer
d75335a7de drop python 3.4 support (#5087)
* drop python 3.4 support

Our dependencies have started dropping support so it is becoming
difficult to test. Additionally, Python 3.4 represents <2% of our
downloads, so taking on a large maintenance burden to maintain support
isn't a good use of limited time. Accordingly, we're dropping testing
infrastructure and migrating our abi3 wheels to py35+.

* use removed instead of dropped
2019-12-08 23:42:55 -05:00
Mads Jensen
1340c0080c Use dict literals. (#5080) 2019-12-02 08:02:30 -06:00
Alex Gaynor
9dc710e65a Get tests passing with latest wycheproof clone (#5076)
* Get tests passing with latest wycheproof clone

* Fix x25519 wycheproof tests

* Fix for acme repo changes
2019-11-26 11:48:35 +08:00
Alex Gaynor
21eb6f4c8b Run codecov in required mode so it exits with non-zero on failure (#5073) 2019-11-25 07:18:30 +08:00
Alex Gaynor
aa7c2992c9 Fixes #5065 -- skip serialization tests which use RC2 if OpenSSL doesn't have RC2 (#5072)
* Refs #5065 -- have a CI job with OpenSSL built with no-rc2

* Fixes #5065 -- skip serialization tests which use RC2 if OpenSSL doesn't have RC2
2019-11-25 07:16:14 +08:00
Alex Gaynor
86b4b391ed Skip coverage uploads on pypy3-nocoverage builds (#5074) 2019-11-25 07:13:55 +08:00
Michael Felt
e45fd8040f issue-5041: do not add extra flags when compiler or platform does not support them (#5042)
* check for suitable compiler (platform) before adding special flags

* pep8 corrections

* later pep8 messages

* add clang to auto accepted compilers

* modify syntax so multi-line is accepted
2019-11-24 11:17:09 -05:00
Maximilian Hils
7247665f76 add SSL_get_verify_result (#5071) 2019-11-23 23:54:51 -05:00
Maximilian Hils
0538ca640c add SSL_CTX_get0_param (#5070) 2019-11-22 19:24:20 -05:00
Alex Gaynor
2bc47fe2fd Added a test vector of an OCSP response with SCT extension (#5066) 2019-11-16 11:25:20 +08:00
Maximilian Hils
9481b8f483 add SSL[_CTX]_clear_mode (#5062) 2019-11-11 22:06:39 -05:00
Maximilian Hils
b5decbac5f Windows Installation: fix link to binaries (#5061)
* Windows Installation: fix link to binaries

While https://github.com/pyca/infra/tree/master/windows/openssl points a trusted source (which would be preferable),
pyca/infra currently does not provide any Windows binaries for download. Linking to the official OpenSSL wiki seems to 
be a reasonable compromise.

* fix whitespace
2019-11-11 20:37:58 -05:00
Paul Kehrer
2e86983a77 Parse single_extensions in OCSP responses (#5059)
* add single_extensions to OCSPResponse (#4753)

* new vector, updateed docs, more stringent parser, changelog, etc

* simplify PR (no SCT for now)

* add a comment

* finish pulling out the sct stuff so tests might actually run
2019-11-11 00:40:11 -05:00
Alex Gaynor
c7ba7be8fe Fixes #4699 -- document that UnrecognizedExtension can be used in generation (#5057) 2019-11-11 10:19:44 +08:00
Alex Gaynor
1396f388c8 Fixed #4377 -- document certificate policies with an example (#5058) 2019-11-11 09:36:45 +08:00
Alex Gaynor
1a73704b8c Fixed #5050 -- dropped support for an old LibresSSL release (#5056)
* Fixed #5050 -- dropped support for an old LibresSSL release

* Changelog
2019-11-11 08:16:56 +08:00
Alex Gaynor
2513213015 Retry failed code coverage uploads (#5054) 2019-11-11 07:15:11 +08:00
Alex Gaynor
3e7ce97cb1 Run py3.8 as our py3 in macOS CI (#5032) 2019-11-11 07:14:54 +08:00
Noel Remy
68e49ae440 Let Oid enforce positive decimal integers (#5053)
Failing that would lead to an OpenSSL error when calling OBJ_txt2obj at
serialization.

Adds basic tests for oids.
2019-11-10 10:45:30 -05:00