Commit graph

7962 commits

Author SHA1 Message Date
Paul Kehrer
c2624de7ee
bump version for 3.2 dev (#5431) 2020-08-27 01:54:03 -04:00
Paul Kehrer
ba2c0e5e3e
3.1 release (#5430) 2020-08-27 00:00:17 -04:00
Ian Wienand
c63106c46b
Build manylinux wheels with Zuul (#5386)
This adds the Zuul playbooks and role to build manylinux wheels for
aarch64 and x86_64 (while aarch64 is the primary goal; it's good for
the overall code to keep it flexible).

It first builds an sdist from the checkout and then builds the wheels
in the appropriate containers.

Note this adds the jobs in the gate pipeline, which currently responds
to Pull Requests, and the release pipeline, which responds to pushes
to refs/tags/.* (see [1]).  Note for results of jobs run against tags
you will need to find the job directly from

 https://zuul.opendev.org/t/pyca/builds

because there is nowhere to report the results as such (it could be
configured to send an email).

The wheels are published to the wheelhouse/ directory in the Zuul
logs, which is also listed as an artifact on the build results page.

[1] https://review.opendev.org/748323
2020-08-26 22:21:59 -05:00
Paul Kehrer
bda138768a
new black, actually slightly different than the old black (#5429) 2020-08-26 22:59:43 -04:00
Paul Kehrer
0b2435940e
remove keywords with side effects hack in setup.py (#5426) 2020-08-25 11:28:08 -04:00
Alex Gaynor
1394edb83a
rephrase changelog entry (#5422)
* rephrase changelog entry

* Update CHANGELOG.rst
2020-08-24 18:43:58 -05:00
Paul Kehrer
b9d26d2608
add some words about separating ECDH and ECDSA (#5423)
* add some words about separating ECDH and ECDSA

* Thomas Pornin wrote some good words about why you should try not to mix
your ECDH and ECDSA keys.
2020-08-24 14:01:45 -04:00
Alex Gaynor
ed3ded47e7
bump libressl 3.1.x (#5421) 2020-08-24 08:11:22 -05:00
Paul Kehrer
b6c51be988
document that we auto-chunk on symmetric cipher contexts now (#5420) 2020-08-24 08:22:47 -04:00
Paul Kehrer
f90ba1808e
chunked update_into (#5419)
* chunked update_into

* all pointer arithmetic all the time

* review feedback
2020-08-24 00:41:33 -04:00
Alex Gaynor
bc4b956f75
Run AWS SDK tests on Python 3.7 (#5414)
* Run AWS SDK tests on Python 3.8

* switch to 37

* Update aws-encryption-sdk.sh

* Update dynamodb-encryption-sdk.sh
2020-08-17 08:23:36 -05:00
Paul Kehrer
b2c5ac8919
Docs testing (#5413)
* document we test on aarch64

even odds this angers the spellchecker

* Just as my previous commit msg prophesied

* Update docs/spelling_wordlist.txt

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2020-08-16 21:10:47 -04:00
Paul Kehrer
7081923cb7
refactor wheel builder to use workflows and download/build separately (#5412)
* refactor wheel builder to use workflows and download/build separately

* Update .github/workflows/wheel-builder.yml

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2020-08-16 18:50:38 -04:00
Alex Gaynor
ad17c03784
Attempt to drop the user switch in docker (#5411) 2020-08-16 17:24:35 -05:00
Paul Kehrer
0ed8d66246
use _get_backend everywhere (#5408)
* use _get_backend everywhere

* black
2020-08-16 18:04:10 -04:00
Paul Kehrer
42ad3b0cd8
be consistent in our testing (#5409)
* be consistent in our testing

we don't use default_backend this way in our tests

* more black
2020-08-16 16:49:01 -04:00
Paul Kehrer
872835ea0d
update submitting patches docs to be a bit more true (#5407)
For now best practice is that they should be optional.
2020-08-16 15:23:02 -04:00
Paul Kehrer
4a581a9e70
move encoders into backend as well (#5406)
this will be useful later, i swear
2020-08-15 19:40:22 -04:00
Paul Kehrer
9a55f775e5
move the x509 parsers into the backend object (#5405)
* move the parser into the backend object

This allows us to generate the list of supported extensions when
instantiating the backend object rather than building multiple parsers
and picking the right one at runtime when parsing the extensions themselves.

* sigh
2020-08-15 19:05:46 -04:00
Alex Gaynor
679a1c7b93
clean up error stack in p7 (#5403) 2020-08-15 15:52:16 -05:00
Paul Kehrer
0fa77f1530
HOTP and TOTP should also have optional backends (#5402) 2020-08-15 16:34:59 -04:00
Paul Kehrer
e52b861d75
add changelog and update backend docs for optional change (#5401) 2020-08-15 16:16:50 -04:00
Paul Kehrer
1be5b5e8b8
get rid of xenial builder on arm64 (#5398)
* get rid of xenial builder on arm64

death to xenial

* remove from project.yaml as well

* try py27 on centos8
2020-08-15 15:47:55 -04:00
Alex Gaynor
8c21ebae70
Improve debugability of this internal error (#5399) 2020-08-15 14:10:36 -05:00
Alex Gaynor
fce9a79215
fixes #4706 -- don't internal error on corrupt private key (#5307)
* fixes #4706 -- don't internal error on corrupt private key

* Temporary disable paramiko
2020-08-15 11:50:13 -05:00
Paul Kehrer
652983a624
improve CI speed by removing some macos builders (#5397)
testing on every python version is necessary but we don't need to do it
on all platforms. macos has the lowest concurrency so let's cut there.
2020-08-15 12:09:43 -04:00
Alex Gaynor
4ef460abb2
Attempt to get wycheproof working on arm64 (#5393) 2020-08-15 10:26:43 -05:00
Paul Kehrer
ab9a65ba18
make backend arg optional for rsa (#5396) 2020-08-15 09:51:42 -04:00
Paul Kehrer
f317452e96
optional backend for dh, dsa, ec (#5395) 2020-08-15 09:51:21 -04:00
Paul Kehrer
4fe585447a
optional backend for hash, cipher, cmac, hmac, keywrap (#5394) 2020-08-15 09:50:47 -04:00
Paul Kehrer
24070d7954
make backend optional in serialization (#5392) 2020-08-15 01:05:47 -04:00
Alex Gaynor
ad608e2355
update to latest libessl 3.1.x (#5391) 2020-08-14 23:55:11 -05:00
Paul Kehrer
519cae6a2d
x509 optional backend args (#5390) 2020-08-15 00:34:04 -04:00
Paul Kehrer
40bfc7f75b
remove KDF backend requirements (#5389) 2020-08-14 23:48:08 -04:00
Paul Kehrer
e597fa019d
deprecate support for python 3.5 (#5387) 2020-08-14 14:45:42 -04:00
stphnlyd
95a5bac201
return from void function cannot compile on solaris studio (#5385) 2020-08-11 12:27:44 -04:00
Paul Kehrer
77099636b6
separate these into two test files (#5383)
* separate these into two test files

AES-GCM is so painful in collection that I want it in another file

* fix flake8
2020-08-10 00:57:17 -04:00
Alex Gaynor
9e84c88ad3
Sleep after errors to increase the chance of success (#5382) 2020-08-07 20:27:17 -05:00
Alex Gaynor
1372bc87a2
Run pep8 and packaging in the same job (#5380) 2020-08-07 17:42:25 -05:00
Alex Gaynor
dabc36d7e4
Update which PyPy versions we test against (#5377)
refs #5376
2020-08-05 21:11:36 -05:00
Alex Gaynor
3a238400ac
define SYS_getrandom on linux arm64 (#5378) 2020-08-05 21:11:06 -05:00
Ian Wienand
4d2b52d4d1
Add initial OpenDev ARM64 testing (#5341)
This is the initial configuration for Zuul to run pyca/cryptography
tox jobs on a range of ARM64 nodes provided by OpenDev.  The
underlying ARM64 resources are donated for use by the OpenDev project
by Linaro.

This is under discussion at https://github.com/pyca/cryptography/issues/5339

If the OpenDev Zuul app (https://github.com/apps/opendev-zuul) is
added to this repository, it should be able to speculatively test and
run these jobs (however, some configuration will be required on the
OpenDev side before this will happen).

This is currently a very simple run of tox on the code.  For basic job
documentation see https://zuul-ci.org/docs/zuul/reference/jobs.html.

These jobs inherit from the opendev base job defined in
https://opendev.org/opendev/base-jobs.  This handles the node setup,
initial clone of pull requests, etc. and then after the job runs the
log collection, upload and publishing steps.  This in turn uses a lot
of reusable components from https://zuul-ci.org/docs/zuul-jobs/
2020-08-05 15:32:08 -05:00
Alex Gaynor
7deca00c0b
Reduce the usage of python2 in CI for downstreams (#5375) 2020-08-05 15:07:57 -05:00
Paul Kehrer
cfa7fb74bc
pyopenssl can run on focal now (#5374) 2020-08-05 01:22:53 -04:00
Paul Kehrer
c898871daa
support PKCS7 certificate parsing (#5371)
* support PKCS7 certificate parsing

* refcounts are different in 1.0.2

* rename the functions

* black

* empty commit

* review feedback
2020-08-04 23:50:02 -04:00
Paul Kehrer
143f56f65c
add docker builders, migrate travis to focal by default (#5372)
* add docker builders, migrate travis to focal by default

* get it right

* use older versions where necessary
2020-08-03 00:56:49 -04:00
Paul Kehrer
6d68bfdaee
add basic PKCS7 test vectors (#5370) 2020-08-02 17:28:54 -04:00
Paul Kehrer
80a4ce7b9d
check if a value is null before we gc (#5369) 2020-08-02 16:48:30 -04:00
Alex Gaynor
d9c821eaf9
Attempt to retry when downloading OpenSSL (#5364)
* Attempt to retry when downloading OpenSSL

* logging
2020-07-30 16:03:33 -05:00
Alex Gaynor
0140054a32
Commit to dropping OpenSSL 1.0.2 (#5363) 2020-07-30 15:43:43 -05:00