Commit graph

2137 commits

Author SHA1 Message Date
Alex Gaynor
59d8bc6fb9
Document that we test on bullseye (#5197)
* Document that we test on bullseye

* Update spelling_wordlist.txt

* Update installation.rst
2020-04-17 20:14:19 -05:00
Alex Gaynor
55f3b7d71b
fixed linkcheck (#5188) 2020-04-11 17:21:48 -05:00
Alex Gaynor
56143e1adb
Update insallation.rst to reflect our current test matrix (#5183)
* Update insallation.rst to reflect our current test matrix

* Update installation.rst

* Update installation.rst

* Update installation.rst
2020-04-05 22:03:44 -05:00
Alex Gaynor
3b2102af54
Removed deprecated behavior in AKI.from_issuer_subject_key_identifier (#5182) 2020-04-05 20:00:55 -05:00
Alex Gaynor
aece5b3d47
Drop support for OpenSSL 1.0.1 (#5178) 2020-04-04 16:08:08 -05:00
Alex Gaynor
7a2523eca4
fixed linkcheck for CVE website configuration failure (#5169) 2020-03-31 19:24:42 -05:00
Alex Gaynor
0ecb4c5644
linkcheck: remove domain that fixed it's tls from ignore (#5144) 2020-03-19 22:34:30 -05:00
Alex Gaynor
416d6856f1
Fixed linkcheck (#5142)
* Fixed linkcheck

* linkcheck
2020-03-19 14:18:04 -05:00
Alex Gaynor
e320adfe3e
Fix several CI breakages (#5138)
* Replace dead link

* Explicitly run for all PRs

* Update azure-pipelines.yml

* Update wheel-builder.yml
2020-03-19 11:54:34 -05:00
Mads Jensen
f89ce40b62 Replace legacy file handling with a context manager. (#5092)
* Replace legacy file handling with a context manager.

* flake8 fix

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2020-01-12 17:32:21 -05:00
Mads Jensen
a849f40556 Use literals for collections and comprehensions. (#5091) 2020-01-12 17:29:17 -05:00
Paul Kehrer
d75335a7de drop python 3.4 support (#5087)
* drop python 3.4 support

Our dependencies have started dropping support so it is becoming
difficult to test. Additionally, Python 3.4 represents <2% of our
downloads, so taking on a large maintenance burden to maintain support
isn't a good use of limited time. Accordingly, we're dropping testing
infrastructure and migrating our abi3 wheels to py35+.

* use removed instead of dropped
2019-12-08 23:42:55 -05:00
Alex Gaynor
2bc47fe2fd Added a test vector of an OCSP response with SCT extension (#5066) 2019-11-16 11:25:20 +08:00
Maximilian Hils
b5decbac5f Windows Installation: fix link to binaries (#5061)
* Windows Installation: fix link to binaries

While https://github.com/pyca/infra/tree/master/windows/openssl points a trusted source (which would be preferable),
pyca/infra currently does not provide any Windows binaries for download. Linking to the official OpenSSL wiki seems to 
be a reasonable compromise.

* fix whitespace
2019-11-11 20:37:58 -05:00
Paul Kehrer
2e86983a77 Parse single_extensions in OCSP responses (#5059)
* add single_extensions to OCSPResponse (#4753)

* new vector, updateed docs, more stringent parser, changelog, etc

* simplify PR (no SCT for now)

* add a comment

* finish pulling out the sct stuff so tests might actually run
2019-11-11 00:40:11 -05:00
Alex Gaynor
c7ba7be8fe Fixes #4699 -- document that UnrecognizedExtension can be used in generation (#5057) 2019-11-11 10:19:44 +08:00
Alex Gaynor
1396f388c8 Fixed #4377 -- document certificate policies with an example (#5058) 2019-11-11 09:36:45 +08:00
jschmidtlein
d06a3a8f9c issue-5039: added documentation for curve attribute on EllipticCurveP… (#5045)
* issue-5039: added documentation for curve attribute on EllipticCurvePrivateKey based on existing docs

* issue-5039: changed indentation
2019-11-04 20:48:12 -05:00
Alex Gaynor
6d450f7fdc Fixed link for linkcheck (#5047) 2019-11-01 07:10:56 +01:00
Ofek Lev
95a886a807 fix copy pasta in example snippet (#5033) 2019-10-23 08:26:36 -04:00
Felix Fontein
c453041ad2 Fix documentation of AuthorityKeyIdentifier.authority_cert_issuer. (#5001) 2019-10-19 07:26:03 +08:00
Jeremy Lainé
b53ecefbf5 Move backend argument in Scrypt documentation (#5027)
Move the `backend` argument up with the rest of the constructor
arguments, otherwise it's easy to miss it.
2019-10-18 19:23:26 -04:00
Jeremy Lainé
2620fd85d8 Correctly document backend argument of KBKDFHMAC (#5026)
The documentation states that `backend` should be a `HashBackend`
instance when in fact it should be a `HMACBackend` instance.
2019-10-18 19:12:03 -04:00
Alex Gaynor
1c186772f6 Fixes #5018 -- break users on OpenSSL 1.0.1 (#5022)
* Fixes #5018 -- break users on OpenSSL 1.0.1

* Grammar

* Syntax error

* Missing import

* Missing import
2019-10-18 20:47:15 +08:00
Paul Kehrer
97570e6445 we're done here (#4991) 2019-09-09 07:17:44 -05:00
Marko Kreen
f7c77712d6 Finish ed25519 and ed448 support in x509 module (#4972)
* Support ed25519 in csr/crl creation

* Tests for ed25519/x509

* Support ed448 in crt/csr/crl creation

* Tests for ed448/x509

* Support ed25519/ed448 in OCSPResponseBuilder

* Tests for eddsa in OCSPResponseBuilder

* Builder check missing in create_x509_csr

* Documentation update for ed25519+ed448 in x509
2019-09-09 07:44:02 +08:00
Paul Kehrer
b5b6bd13a2 fix coverage by adding two artificial DSA public keys (#4984)
* fix coverage by adding two artificial DSA public keys

One key removes the optional parameters from the structure to cover a
branch conditional, and the other key has its BITSTRING padding value
set to a non-zero value.

* lexicographic? never heard of it
2019-09-06 22:22:51 -05:00
Harry Stern
ca723c42d0 Improve documentation for ECDSA sign and verify (#4970)
- Note that signatures are DER-encoded
- Note that signatures can be encoded from r,s using util function
2019-08-16 09:53:56 +08:00
Paul Kehrer
784676de33 add x509 CSR with challenge password (#4942) 2019-07-09 08:10:06 -04:00
Jeff Yang
cd59bd275e add class methods for poly1305 sign verify operations (#4932) 2019-07-08 15:44:11 -05:00
Paul Kehrer
a15986844e prevaricate more about anyextendedkeyusage (#4939) 2019-07-06 19:11:36 -04:00
Paul Kehrer
7b1391bfd4 ed25519 support in x509 certificate builder (#4937)
* ed25519 support in x509 certificate builder

This adds minimal ed25519 support. More to come.

* Apply suggestions from code review

Co-Authored-By: Alex Gaynor <alex.gaynor@gmail.com>
2019-07-06 19:01:33 -04:00
Paul Kehrer
7c2cec8597 fix inaccurate ed25519 vector docs (#4938) 2019-07-06 17:01:54 -04:00
Paul Kehrer
60e83b2452 more ed25519 vectors, better description of RFC 8410 vector (#4936)
* more ed25519 vectors, better description of RFC 8410 vector

* typo

* oops, doc'd wrong
2019-07-06 16:04:15 -04:00
Paul Kehrer
de7c5e6d53 add ed25519ph x509 test vector (#4933) 2019-07-03 19:05:03 -04:00
Paul Kehrer
977f00349d we do not use getrandom in nonblocking mode any more (#4934) 2019-07-03 18:29:47 -04:00
Alex Gaynor
fadd16d102 Make the rst headers in limitations.rst consistent (#4926) 2019-06-16 08:36:35 -05:00
Alex Gaynor
a869061d76 Fixes #4731 -- update the secure memory wiping docs (#4925)
* Fixes #4731 -- update the secure memory wiping docs

* It's a word!
2019-06-15 22:26:31 -05:00
Alex Gaynor
5f8c8a31a7 Refs #4923; deprecate OpenSSL 1.0.1 (#4924)
* Refs #4923; deprecate OpenSSL 1.0.1

* changelog
2019-06-15 18:54:42 -05:00
Paul Kehrer
75b4eaac47 Manylinux2010 wheel (#4910)
* add manylinux2010 wheel builder

* various updates

* empty commit

* need to pass a plat tag

* hacks need hacks
2019-06-02 19:42:20 -05:00
Paul Kehrer
463348bc71 update docs with latest info & remove the last ci.cryptography.io stuff (#4898) 2019-05-26 10:35:00 -04:00
Alex Gaynor
4f7715b6e6 Remove the final vestigates of Jenkins (#4897)
* Remove the final vestigates of Jenkins

* flake8
2019-05-26 07:35:49 -04:00
Stephen.Y
857d401f3c Fix typo in docs hazmat Ed448 (#4886) 2019-05-10 17:08:06 -04:00
Alex Gaynor
ea4d1ee3fa Order the elements in reviewing patches reasonably (#4883) 2019-05-09 19:11:21 -04:00
Alex Gaynor
ef0ed84180 Replace debian wheezy with ubuntu trusty (#4871)
* Try running tests without wheezy

* Added a trusty builder

* Update our supported versions in docs
2019-05-05 18:49:44 -04:00
Paul Kehrer
6ec71fd045 add RSA PSS certificate (#4865)
* add RSA PSS certificate

* i still maintain that 257 is slightly better than 256
2019-05-04 14:42:28 -04:00
Alex Gaynor
b5e34e4990 Set a timeout for linkcheck (#4870) 2019-05-04 12:15:44 -04:00
Alex Gaynor
2a5eddcc7a Un-linkcheck-ignore a domain that's now properly serving a chain (#4859) 2019-04-27 14:03:49 -05:00
Alex Gaynor
f709ce5c5c ... regular expressions... what can you do? (#4849)
* ... regular expressions... what can you do?

* These are raw strings
2019-04-17 12:11:49 +08:00
Alex Gaynor
33b3b3eb4a Crypto Docs Get Cryptography (#4850) 2019-04-17 08:01:59 +08:00