Commit graph

12886 commits

Author SHA1 Message Date
Paul Kehrer
f299a48153
remove deprecated call (#12052) 2024-11-27 17:50:10 +00:00
Alex Gaynor
439eb0594a
Bump version for 44.0.0 (#12051) 2024-11-27 17:27:28 +00:00
dependabot[bot]
2c5ad4d8dc
chore(deps): bump maturin from 1.7.4 to 1.7.5 in /.github/requirements (#12050)
Bumps [maturin](https://github.com/pyo3/maturin) from 1.7.4 to 1.7.5.
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](https://github.com/pyo3/maturin/compare/v1.7.4...v1.7.5)

---
updated-dependencies:
- dependency-name: maturin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-27 08:46:40 -05:00
dependabot[bot]
d23968addd
chore(deps): bump libc from 0.2.165 to 0.2.166 (#12049)
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.165 to 0.2.166.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.166/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.165...0.2.166)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-27 08:46:07 -05:00
pyca-boringbot[bot]
133c0e02ed
Bump x509-limbo and/or wycheproof in CI (#12047)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-27 00:37:34 +00:00
pyca-boringbot[bot]
f2259d7aa0
Bump BoringSSL and/or OpenSSL in CI (#12046)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-26 16:25:55 -08:00
Alex Gaynor
e201c870b8
fixed metadata in changelog (#12044) 2024-11-26 08:23:37 -08:00
Alex Gaynor
c6104cc366
Prohibit Python 3.9.0, 3.9.1 -- they have a bug that causes errors (#12045) 2024-11-26 08:23:15 -08:00
Quentin Retourne
d6cac753c2
Add support for decrypting S/MIME messages (#11555)
* first python API proposition

first round-trip tests

feat: made asn1 structures readable

refacto: adapted existing functions accordingly

feat/pkcs12: added symmetric_decrypt

feat: deserialize 3 possible encodings

feat: handling AES-128

feat: raise error when no recipient is found

feat/pkcs7: added decanonicalize function

feat/asn1: added decode_der_data

feat/pkcs7: added smime_enveloped_decode

tests are the round-trip (encrypt & decrypt)

more tests for 100% python coverage

test support pkcs7_encrypt with openssl

added algorithm to pkcs7_encrypt signature

refacto: decrypt function is clearer

flow is more natural

refacto: added all rust error tests

refacto: added another CA chain for checking

fix: const handling

Refactor PKCS7Decryptor to pkcs7_decrypt

refacto: removed SMIME_ENVELOPED_DECODE from rust code

refacto: removed decode_der_data

adapted tests accordingly

removed the PEM tag check

added tests for smime_decnonicalize

one more test case

Update src/rust/src/pkcs7.rs

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

took comments into account

pem to der is now outside of decrypt

fix: removed test_support pkcs7_encrypt

added vector for aes_256_cbc encrypted pkcs7

feat: not using test_support decrypt anymore

added new vectors for PKCS7 tests

feat: using pkcs7 vectors

removed previous ones

fix: changed wrong function

feat: added certificate issuer check

test: generating the RSA chain

removed the vectors accordingly

moved symmetric_decrypt to pkcs7.rs

* Update src/cryptography/hazmat/primitives/serialization/pkcs7.py

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

* fix: removed use of deprecated new_bound for PyBytes

* corrected some error types

* updated tests accordingly

* fix: handling other key encryption algorithms

added vectors & tests accordingly

* first attempts raising error when no header to remove

* one more test to handle text data without header

* fix: went back to the previous implementation

* refacto: removed the return part

* feat: Binary option does not seem useful for decryption

removed decanonicalization function

adapted tests accordingly

* moved logic into rust

only left some checks (for now?)

* removed pyfunction for the inner decrypt one

* added checks in rust now :)

changed name for clarity

* removed unused function

* some checks not needed anymore

* removed a parameter

* took comments into account

* removed unused import

removed excess get_type

* added first unwrap corrections

cleaned tests, added some others

added more vectors

* no more unwrap for parameter checks

* removing headers is Python now

added tests accordingly

will compare with OpenSSL

* final corrections?

* first version of documentation

some minor refactoring

* corrected doctests

* better indentation

* doctest: added RSA private key

* oops

---------

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2024-11-26 08:39:53 -05:00
dependabot[bot]
b8e5bfd4d7
chore(deps): bump libc from 0.2.164 to 0.2.165 (#12042)
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.164 to 0.2.165.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.165/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.164...0.2.165)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-26 04:56:22 +00:00
dependabot[bot]
85d92f6ecc
chore(deps): bump virtualenv from 20.27.1 to 20.28.0 (#12040)
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.27.1 to 20.28.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.27.1...20.28.0)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-26 04:51:49 +00:00
dependabot[bot]
abecfaadb2
chore(deps): bump itoa from 1.0.13 to 1.0.14 (#12039)
Bumps [itoa](https://github.com/dtolnay/itoa) from 1.0.13 to 1.0.14.
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](https://github.com/dtolnay/itoa/compare/1.0.13...1.0.14)

---
updated-dependencies:
- dependency-name: itoa
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-26 04:45:11 +00:00
dependabot[bot]
8f522feb12
chore(deps): bump pyo3 from 0.23.1 to 0.23.2 (#12038)
Bumps [pyo3](https://github.com/pyo3/pyo3) from 0.23.1 to 0.23.2.
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pyo3/pyo3/compare/v0.23.1...v0.23.2)

---
updated-dependencies:
- dependency-name: pyo3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-26 04:44:57 +00:00
pyca-boringbot[bot]
84aa9d6eef
Bump x509-limbo and/or wycheproof in CI (#12035)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-26 00:39:08 +00:00
pyca-boringbot[bot]
a7f95c1d20
Bump BoringSSL and/or OpenSSL in CI (#12034)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-26 00:30:29 +00:00
dependabot[bot]
7971c6b3e0
chore(deps): bump portable-atomic from 1.9.0 to 1.10.0 (#12031)
Bumps [portable-atomic](https://github.com/taiki-e/portable-atomic) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/taiki-e/portable-atomic/releases)
- [Changelog](https://github.com/taiki-e/portable-atomic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/portable-atomic/compare/v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: portable-atomic
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-25 12:21:48 +00:00
dependabot[bot]
3c7c54ffc8
chore(deps): bump coverage from 7.6.1 to 7.6.8 (#12032)
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.6.1 to 7.6.8.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.6.1...7.6.8)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-25 12:21:20 +00:00
Alex Gaynor
0c7607294c
Convert the remaining extensions to use Asn1Operation (#12030) 2024-11-24 13:10:15 -08:00
Alex Gaynor
f01ee1dd48
Convert several additional extensions to use Asn1Operation (#12020) 2024-11-24 12:11:03 -08:00
Alex Gaynor
7124ffb4cf
Build manylinux 2.34 images (#12029) 2024-11-24 07:56:32 -08:00
Alex Gaynor
050b6560e9
Remove various pointless borrows (#12026) 2024-11-24 06:56:05 -08:00
Alex Gaynor
d3403c0de0
Avoid storing references to Certificates (#12028)
Its asymmetric with the read path, which owns the value, and thus woudl need to change for our GAT API.
2024-11-24 06:55:29 -08:00
pyca-boringbot[bot]
3452160218
Bump BoringSSL and/or OpenSSL in CI (#12027)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-24 00:19:16 +00:00
pyca-boringbot[bot]
644dcafecf
Bump BoringSSL and/or OpenSSL in CI (#12025)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-23 00:20:10 +00:00
dependabot[bot]
c266456cd2
chore(deps): bump ruff from 0.7.4 to 0.8.0 (#12023)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.7.4 to 0.8.0.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.7.4...0.8.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-22 07:08:33 -05:00
dependabot[bot]
c469b44603
chore(deps): bump proc-macro2 from 1.0.91 to 1.0.92 (#12022)
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.91 to 1.0.92.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.91...1.0.92)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-22 07:08:11 -05:00
dependabot[bot]
3c83d15e9b
chore(deps): bump syn from 2.0.88 to 2.0.89 (#12021)
Bumps [syn](https://github.com/dtolnay/syn) from 2.0.88 to 2.0.89.
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](https://github.com/dtolnay/syn/compare/2.0.88...2.0.89)

---
updated-dependencies:
- dependency-name: syn
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-22 07:07:47 -05:00
Alex Gaynor
f6282863f9
Apply the Asn1Operation API to several extensions (#12019) 2024-11-21 19:26:48 -08:00
Alex Gaynor
750f34e95b
Introduce new GAT based Asn1 Read/Write (#12011)
This replaces the runtime based Asn1ReadableOrWritable.

Adopts it for IssuingDistributionPoint, DistributionPoint
2024-11-21 18:47:05 -08:00
pyca-boringbot[bot]
a93d1947d7
Bump BoringSSL and/or OpenSSL in CI (#12017)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-22 00:19:39 +00:00
dependabot[bot]
a5ce486ec5
chore(deps): bump proc-macro2 from 1.0.90 to 1.0.91 (#12016)
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.90 to 1.0.91.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.90...1.0.91)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-21 07:38:57 -05:00
dependabot[bot]
aa77402cc2
chore(deps): bump syn from 2.0.87 to 2.0.88 (#12015)
Bumps [syn](https://github.com/dtolnay/syn) from 2.0.87 to 2.0.88.
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](https://github.com/dtolnay/syn/compare/2.0.87...2.0.88)

---
updated-dependencies:
- dependency-name: syn
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-21 07:38:20 -05:00
dependabot[bot]
6258d8a6c4
chore(deps): bump uv from 0.5.3 to 0.5.4 in /.github/requirements (#12013)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.3 to 0.5.4.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.3...0.5.4)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-21 07:37:37 -05:00
dependabot[bot]
5c25564f2e
chore(deps): bump uv from 0.5.3 to 0.5.4 (#12012)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.3 to 0.5.4.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.3...0.5.4)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-21 07:37:19 -05:00
Alex Gaynor
ca52b619ce
Bump asn1 to 0.20 (#12010) 2024-11-21 04:12:09 +00:00
dependabot[bot]
525350cd62
chore(deps): bump itoa from 1.0.12 to 1.0.13 (#12009)
Bumps [itoa](https://github.com/dtolnay/itoa) from 1.0.12 to 1.0.13.
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](https://github.com/dtolnay/itoa/compare/1.0.12...1.0.13)

---
updated-dependencies:
- dependency-name: itoa
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-21 04:07:26 +00:00
dependabot[bot]
e0b937a0f6
chore(deps): bump proc-macro2 from 1.0.89 to 1.0.90 (#12008)
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.89 to 1.0.90.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.89...1.0.90)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-21 04:07:07 +00:00
pyca-boringbot[bot]
3c353944cc
Bump BoringSSL and/or OpenSSL in CI (#12007)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-21 00:19:50 +00:00
dependabot[bot]
c58e8b8b0a
chore(deps): bump uv from 0.5.2 to 0.5.3 (#12001)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.2...0.5.3)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-20 07:24:59 -05:00
dependabot[bot]
926d084bc7
chore(deps): bump uv from 0.5.2 to 0.5.3 in /.github/requirements (#12002)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.2...0.5.3)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-20 07:05:23 -05:00
dependabot[bot]
106b735692
chore(deps): bump unicode-ident from 1.0.13 to 1.0.14 (#12003)
Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.13 to 1.0.14.
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](https://github.com/dtolnay/unicode-ident/compare/1.0.13...1.0.14)

---
updated-dependencies:
- dependency-name: unicode-ident
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-20 07:05:08 -05:00
dependabot[bot]
54af082d60
chore(deps): bump itoa from 1.0.11 to 1.0.12 (#12004)
Bumps [itoa](https://github.com/dtolnay/itoa) from 1.0.11 to 1.0.12.
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](https://github.com/dtolnay/itoa/compare/1.0.11...1.0.12)

---
updated-dependencies:
- dependency-name: itoa
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-20 07:04:38 -05:00
pyca-boringbot[bot]
fc78bf0e97
Bump x509-limbo and/or wycheproof in CI (#12000)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-20 00:37:16 +00:00
pyca-boringbot[bot]
a6237ca11e
Bump BoringSSL and/or OpenSSL in CI (#11999)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-20 00:18:11 +00:00
Quentin Retourne
57401ba194
added vector with different key encryption algo (#11998)
adapted documentation accordingly
2024-11-19 06:44:21 -05:00
pyca-boringbot[bot]
be03c0cad2
Bump x509-limbo and/or wycheproof in CI (#11997)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-19 00:38:46 +00:00
pyca-boringbot[bot]
44e0878284
Bump BoringSSL and/or OpenSSL in CI (#11996)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2024-11-19 00:18:56 +00:00
Paul Kehrer
4c72f36823
remove sct abc (#11995)
* remove sct abc

* don't alias
2024-11-17 12:24:19 -05:00
Paul Kehrer
3fdf1f8b98
remove csr abc (#11994) 2024-11-17 17:03:33 +00:00
Paul Kehrer
1cae81e6da
remove OCSPSingleResponse abc (#11993) 2024-11-17 16:58:59 +00:00