Commit graph

314 commits

Author SHA1 Message Date
Alex Gaynor
cfd079a034
Updates for our new main branch (#5818) 2021-02-11 21:15:39 -06:00
Alex Gaynor
e0477596f7
Remove __future__ import from our code (#5610) 2020-12-09 00:35:11 -06:00
Alex Gaynor
ff12a37552
Remove Python2 from CI and code that branched on it (#5607)
* Remove Python2 from CI and code that branched on it

* Update setup.py

Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>

* remove

* review feedback

Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
2020-12-08 23:10:10 -06:00
Paul Kehrer
4645f02c25
disallow p less than 512-bit on DH (#5592)
* disallow p less than 512-bit on DH

OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere
that's practical for us. (Note that we do not enforce on deserializing
PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the
3.0.0 support branch we can test an error path)

* missing test

* black

* _MIN_MODULUS_SIZE is now a thing

* skip on fips
2020-11-29 11:01:16 -05:00
Alex Gaynor
d3eae8d7db
Delete all the 1.0.2 code (#5511) 2020-10-25 22:41:40 -07:00
Alex Gaynor
0b35c5d701
Remove bindings docs (#5469) 2020-09-20 16:49:09 -05:00
Paul Kehrer
00ba159220
add RSA 4096-bit self-signed CA for some upcoming tests (#5464) 2020-09-14 19:40:05 -04:00
Alex Gaynor
bfe7b455c5
Account for Bruce redoing his website or something (#5461) 2020-09-13 19:03:36 -05:00
Alex Gaynor
63dfc57fca
fixed verify script that couldn't have ever worked (#5443) 2020-08-29 09:39:31 -05:00
Paul Kehrer
872835ea0d
update submitting patches docs to be a bit more true (#5407)
For now best practice is that they should be optional.
2020-08-16 15:23:02 -04:00
Paul Kehrer
6d68bfdaee
add basic PKCS7 test vectors (#5370) 2020-08-02 17:28:54 -04:00
Alex Gaynor
6bd3faa114
Tell people to use black in our dev docs (#5328)
* Tell people to use black in our dev docs

* For codecov
2020-07-20 15:16:29 -05:00
Alex Gaynor
60aa04481f
Paint it Black by the Rolling Stones (#5324) 2020-07-20 13:06:29 -05:00
Paul Kehrer
c51f7957dd
raise a valueerror on multi-SINGLERESP valued OCSP responses (#5316)
InternalErrors are bad when we know they're reachable
2020-07-18 20:59:56 -04:00
Paul Kehrer
7a233b9a60
support 4096 bit DSA parsing from numbers classes (#5301)
* support 4096 bit DSA parsing from numbers classes

* need to get local linting fixed.

* reorder

* add a link to more reasons why DSA sucks
2020-07-05 21:19:39 -04:00
Paul Kehrer
c868961033
add unstructured name x509 csr attribute vector (#5302)
* add unstructured name x509 csr attribute vector

* Update docs/development/test-vectors.rst

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2020-07-05 21:06:39 -04:00
Paul Kehrer
bd48e0f693
invalid challenge value csr (#5300) 2020-07-05 16:55:24 -04:00
Paul Kehrer
13fae162da
add SubjectInformationAccess extension support (#5295)
* add SubjectInformationAccess extension support

* fixes
2020-07-02 01:13:33 -04:00
Alex Gaynor
f0bc6620d9
Fix for linkcheck (#5281)
* Fix for linkcheck

* attempted linkcheck fix
2020-06-20 17:39:22 -05:00
Marko Kreen
bf175454a8
Test vectors for OpenSSH serialization format (#5151) 2020-05-25 13:24:17 -05:00
Alex Gaynor
12e85b5916
Added wycheproof hmac vectors (#5238) 2020-04-26 15:53:58 -05:00
Mads Jensen
f89ce40b62 Replace legacy file handling with a context manager. (#5092)
* Replace legacy file handling with a context manager.

* flake8 fix

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2020-01-12 17:32:21 -05:00
Mads Jensen
a849f40556 Use literals for collections and comprehensions. (#5091) 2020-01-12 17:29:17 -05:00
Paul Kehrer
d75335a7de drop python 3.4 support (#5087)
* drop python 3.4 support

Our dependencies have started dropping support so it is becoming
difficult to test. Additionally, Python 3.4 represents <2% of our
downloads, so taking on a large maintenance burden to maintain support
isn't a good use of limited time. Accordingly, we're dropping testing
infrastructure and migrating our abi3 wheels to py35+.

* use removed instead of dropped
2019-12-08 23:42:55 -05:00
Alex Gaynor
2bc47fe2fd Added a test vector of an OCSP response with SCT extension (#5066) 2019-11-16 11:25:20 +08:00
Paul Kehrer
2e86983a77 Parse single_extensions in OCSP responses (#5059)
* add single_extensions to OCSPResponse (#4753)

* new vector, updateed docs, more stringent parser, changelog, etc

* simplify PR (no SCT for now)

* add a comment

* finish pulling out the sct stuff so tests might actually run
2019-11-11 00:40:11 -05:00
Alex Gaynor
6d450f7fdc Fixed link for linkcheck (#5047) 2019-11-01 07:10:56 +01:00
Marko Kreen
f7c77712d6 Finish ed25519 and ed448 support in x509 module (#4972)
* Support ed25519 in csr/crl creation

* Tests for ed25519/x509

* Support ed448 in crt/csr/crl creation

* Tests for ed448/x509

* Support ed25519/ed448 in OCSPResponseBuilder

* Tests for eddsa in OCSPResponseBuilder

* Builder check missing in create_x509_csr

* Documentation update for ed25519+ed448 in x509
2019-09-09 07:44:02 +08:00
Paul Kehrer
b5b6bd13a2 fix coverage by adding two artificial DSA public keys (#4984)
* fix coverage by adding two artificial DSA public keys

One key removes the optional parameters from the structure to cover a
branch conditional, and the other key has its BITSTRING padding value
set to a non-zero value.

* lexicographic? never heard of it
2019-09-06 22:22:51 -05:00
Paul Kehrer
784676de33 add x509 CSR with challenge password (#4942) 2019-07-09 08:10:06 -04:00
Paul Kehrer
7c2cec8597 fix inaccurate ed25519 vector docs (#4938) 2019-07-06 17:01:54 -04:00
Paul Kehrer
60e83b2452 more ed25519 vectors, better description of RFC 8410 vector (#4936)
* more ed25519 vectors, better description of RFC 8410 vector

* typo

* oops, doc'd wrong
2019-07-06 16:04:15 -04:00
Paul Kehrer
de7c5e6d53 add ed25519ph x509 test vector (#4933) 2019-07-03 19:05:03 -04:00
Alex Gaynor
ea4d1ee3fa Order the elements in reviewing patches reasonably (#4883) 2019-05-09 19:11:21 -04:00
Paul Kehrer
6ec71fd045 add RSA PSS certificate (#4865)
* add RSA PSS certificate

* i still maintain that 257 is slightly better than 256
2019-05-04 14:42:28 -04:00
Alex Gaynor
9c7aa17ef9 Refs #4830 -- added a vector of an x.509 certificate with a negative … (#4842)
* Refs #4830 -- added a vector of an x.509 certificate with a negative serial number

* Line wrap
2019-04-13 10:38:00 +08:00
Paul Kehrer
88d836e10d add poly1305 test vectors from rfc 7539 (#4800) 2019-03-07 20:23:08 -05:00
Paul Kehrer
20a441870b add ed25519 PKCS8 and subjectPublicKeyInfo vectors (#4719)
* add ed25519 PKCS8 and subjectPublicKeyInfo vectors

* line length fix
2019-02-20 10:48:45 -05:00
Paul Kehrer
3ffa0e216a add ed448 PKCS8 and subjectPublicKeyInfo vectors (#4718) 2019-02-20 10:44:17 -05:00
Paul Kehrer
57f8a533c3 concede to digicert's garbage CDN (#4747)
Which, despite supporting HTTPS, is non-deterministically providing 404s and DigiCert has asserted that http is the only "supported" protocol.
2019-02-03 12:49:36 -05:00
Alex Gaynor
e5463ccb33 consistently linky RFC in the docs (#4716)
* consistently linky RFC in the docs

* oops
2019-01-18 15:19:34 -06:00
Alex Gaynor
aeb3acbe9a Update wycheproof commit in docs (#4687) 2019-01-13 18:11:33 -08:00
Paul Kehrer
638ab4ac77 add x25519 pkcs8/subjectpublickeyinfo vectors (#4685) 2019-01-13 13:09:38 -05:00
Paul Kehrer
60f264b0f2 add signature_hash_algorithm to OCSPResponse (#4681)
* add signature_hash_algorithm to OCSPResponse

* fix pointless asserts
2019-01-10 18:37:03 -05:00
Paul Kehrer
e57c63c34c add x448 private/public PEM/DER pkcs8/subjectpublickeyinfo vectors (#4667) 2019-01-01 18:11:33 -05:00
Alex Gaynor
ebaa570697 Sphinx's website is now https (#4662)
* Sphinx's website is now https

* Sphinx's website is now https
2018-12-30 14:28:48 -06:00
Alex Gaynor
9aeabd9d2a DigiCert's root is now available over https (#4664) 2018-12-30 14:28:19 -06:00
Paul Kehrer
489bae980a add compressed point EC vectors (#4637) 2018-12-10 22:26:48 -05:00
Paul Kehrer
8f3d259bd8 add ed448 test vectors (#4608) 2018-11-24 09:30:39 -06:00
Paul Kehrer
1cd33bc4f0 x448 test vectors (#4576) 2018-11-12 08:18:07 -05:00