Commit graph

13131 commits

Author SHA1 Message Date
Alex Gaynor
fe5f3a9217
Two more testscases for key loading (#12370)
* Two more testscases for key loading

* Update tests/hazmat/primitives/test_serialization.py

Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>

---------

Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
2025-01-31 18:20:31 +00:00
dependabot[bot]
5baed58cdd
chore(deps): bump certifi from 2024.12.14 to 2025.1.31 (#12368)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.12.14 to 2025.1.31.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.12.14...2025.01.31)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-31 06:41:20 -08:00
dependabot[bot]
561f9bf6b3
chore(deps): bump ruff from 0.9.3 to 0.9.4 (#12367)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.9.3 to 0.9.4.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.9.3...0.9.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-31 06:41:02 -08:00
dependabot[bot]
d4e395c78e
chore(deps): bump uv from 0.5.25 to 0.5.26 (#12366)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.25 to 0.5.26.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.25...0.5.26)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-31 06:40:47 -08:00
Alex Gaynor
26a4ee8f6d
fixes #10247 -- clarify negative serial number warning (#12365) 2025-01-30 18:28:10 -08:00
ohemorange
3b689cedb1
Update reference.rst:load_der_x509_certificate to note ValueError raised (#12364)
* Update reference.rst:load_der_x509_certificate to note error raised

It raises the error and therefore should be noted in the documentation.

```
>>> x509.load_der_x509_certificate(b64.b64decode("foobar".encode()))
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
ValueError: error parsing asn1 value: ParseError { kind: InvalidLength }
```

* Update docs/x509/reference.rst

Thanks!

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

---------

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2025-01-30 02:59:28 +00:00
pyca-boringbot[bot]
fac5a99129
Bump BoringSSL and/or OpenSSL in CI (#12363)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-30 00:16:42 +00:00
Alex Gaynor
11b15a309f
fixes #10808 -- allow empty plaintexts for aes-gcm-siv (#12355)
* fixes #10808 -- allow empty plaintexts for aes-gcm-siv

* Update src/rust/build.rs

Co-authored-by: Nick Pope <nick@nickpope.me.uk>

---------

Co-authored-by: Nick Pope <nick@nickpope.me.uk>
2025-01-29 12:21:40 -08:00
dependabot[bot]
ad537914d5
chore(deps): bump uv from 0.5.24 to 0.5.25 (#12358)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.24 to 0.5.25.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.24...0.5.25)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-29 07:38:34 -05:00
pyca-boringbot[bot]
b0b6c8d5f2
Bump x509-limbo and/or wycheproof in CI (#12357)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-28 20:48:05 -05:00
pyca-boringbot[bot]
aad6a0a2c9
Bump BoringSSL and/or OpenSSL in CI (#12356)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-28 20:47:52 -05:00
pyca-boringbot[bot]
25161ff1d9
Bump BoringSSL and/or OpenSSL in CI (#12354)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-28 20:23:30 +00:00
dependabot[bot]
fd74350495
chore(deps): bump actions/setup-python from 5.3.0 to 5.4.0 (#12352)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](0b93645e9f...42375524e2)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-28 08:14:56 -05:00
dependabot[bot]
c2428ebf96
chore(deps): bump unicode-ident from 1.0.15 to 1.0.16 (#12353)
Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.15 to 1.0.16.
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](https://github.com/dtolnay/unicode-ident/compare/1.0.15...1.0.16)

---
updated-dependencies:
- dependency-name: unicode-ident
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-28 13:12:46 +00:00
pyca-boringbot[bot]
ff429b5cc5
Bump x509-limbo and/or wycheproof in CI (#12351)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-28 00:35:23 +00:00
pyca-boringbot[bot]
55a0ceaf51
Bump BoringSSL and/or OpenSSL in CI (#12350)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-28 00:18:57 +00:00
Alex Gaynor
cf55513de0
Added OID for 3DES-EDE-CBC (#12349) 2025-01-27 14:50:17 +00:00
Alex Gaynor
535f134411
Extract ec_params_to_group from SPKI parsing (#12348)
To be used in #12296
2025-01-27 06:43:17 -08:00
Alex Gaynor
ad65dc5231
Provide a password for encryption tests (#12347)
It's never used, because of malformations, but provide one.
2025-01-27 06:39:53 -08:00
Alex Gaynor
f0ca2140a9
Use workspace openssl version everywhere (#12346) 2025-01-27 06:39:00 -08:00
dependabot[bot]
d7f40fad8f
chore(deps): bump openssl from 0.10.68 to 0.10.69 (#12345)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.68 to 0.10.69.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.68...openssl-v0.10.69)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-27 07:57:59 -05:00
pyca-boringbot[bot]
d5d73630e2
Bump BoringSSL and/or OpenSSL in CI (#12343)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-26 00:17:57 +00:00
Alex Gaynor
652867baaa
fixes #12307 -- added unsafe_skip_rsa_key_validation kwarg to ssh private key loading (#12342) 2025-01-25 17:29:54 +00:00
pyca-boringbot[bot]
8844ca3626
Bump BoringSSL and/or OpenSSL in CI (#12340)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-25 00:18:19 +00:00
Alex Gaynor
023a2597ec
Added tests for various malformed PEM files (#12338) 2025-01-24 16:06:53 -08:00
Alex Gaynor
50e465ead1
When parsing a PKCS#12 from OpenSSL, don't directly use its pkey (#12339)
This is in preparation for doing our own key parsing.
2025-01-24 16:05:48 -08:00
Alex Gaynor
45381b4266
Added two new PKCS#8 test cases (#12333)
* Added two new PKCS#8 test cases

* Added two more testcases

* Spelling
2025-01-24 11:04:53 -08:00
dependabot[bot]
269321a936
chore(deps): bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 (#12335)
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.12.3 to 1.12.4.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](67339c736f...76f52bc884)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-24 07:31:08 -05:00
dependabot[bot]
2044e9df72
chore(deps): bump ruff from 0.9.2 to 0.9.3 (#12336)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.9.2 to 0.9.3.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.9.2...0.9.3)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-24 07:30:53 -05:00
dependabot[bot]
35da5bb3d0
chore(deps): bump uv from 0.5.23 to 0.5.24 (#12337)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.23 to 0.5.24.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.23...0.5.24)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-24 07:30:41 -05:00
pyca-boringbot[bot]
904da1649b
Bump BoringSSL and/or OpenSSL in CI (#12334)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-24 00:18:59 +00:00
dependabot[bot]
3f53dd75db
chore(deps): bump unicode-ident from 1.0.14 to 1.0.15 (#12331)
Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](https://github.com/dtolnay/unicode-ident/compare/1.0.14...1.0.15)

---
updated-dependencies:
- dependency-name: unicode-ident
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-23 07:55:08 -05:00
dependabot[bot]
6a423672ac
chore(deps): bump uv from 0.5.22 to 0.5.23 (#12329)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.22 to 0.5.23.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.22...0.5.23)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-23 07:54:15 -05:00
Alex Gaynor
f78724a387
Attempt to drop our usage of lcov and do things with coverage.py (#12289)
* Attempt to drop our usage of lcov and do things with coverage.py

* Update .github/bin/merge_rust_coverage.py

Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>

---------

Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
2025-01-22 17:33:16 -08:00
Paul Kehrer
6074586002
branch name change for boring (#12327)
* branch name change for boring

* fix (part 1)

* fix (part 2)
2025-01-22 20:26:07 -05:00
pyca-boringbot[bot]
e466fc5ac2
Bump BoringSSL and/or OpenSSL in CI (#12328)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-22 16:22:55 -08:00
Alex Gaynor
a233ec23c0
Update constraints files for version dropping releases (#12325) 2025-01-22 06:42:45 -08:00
dependabot[bot]
3403b23588
chore(deps): bump uv from 0.5.21 to 0.5.22 (#12323)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.21 to 0.5.22.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.21...0.5.22)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-22 07:31:31 -05:00
dependabot[bot]
13af34a780
chore(deps): bump dawidd6/action-download-artifact from 7 to 8 (#12324)
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 7 to 8.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](80620a5d27...20319c5641)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-22 07:31:17 -05:00
pyca-boringbot[bot]
0872df7f96
Bump x509-limbo and/or wycheproof in CI (#12321)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-22 00:37:04 +00:00
pyca-boringbot[bot]
07f4232036
Bump BoringSSL and/or OpenSSL in CI (#12320)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-21 19:21:40 -05:00
dependabot[bot]
ff284ed462
chore(deps): bump actions/stale from 9.0.0 to 9.1.0 (#12319)
Bumps [actions/stale](https://github.com/actions/stale) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](28ca103628...5bef64f19d)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-21 13:11:12 +00:00
Robert Sherwood
4dc0746fdc
ObjectIdentifer constructor parameter name mismatch (#12318)
Fixes #12317
2025-01-21 08:09:17 -05:00
pyca-boringbot[bot]
3c5afe498d
Bump x509-limbo and/or wycheproof in CI (#12316)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-21 00:36:56 +00:00
pyca-boringbot[bot]
24f8bb241e
Bump BoringSSL and/or OpenSSL in CI (#12315)
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
2025-01-21 00:17:54 +00:00
Alex Gaynor
d5e7266870
move pkcs#12 into a crate for crypto (#12314) 2025-01-20 15:24:46 -08:00
dependabot[bot]
4feb77792c
chore(deps): bump virtualenv from 20.29.0 to 20.29.1 (#12312)
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.29.0 to 20.29.1.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.29.0...20.29.1)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-20 08:45:10 -05:00
dependabot[bot]
1df158056a
chore(deps): bump uv from 0.5.20 to 0.5.21 (#12313)
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.20 to 0.5.21.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.20...0.5.21)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-20 08:44:44 -05:00
Alex Gaynor
5d16313b42
Added tests for two more PKCS#8 key situations (#12310) 2025-01-19 08:04:56 -08:00
Alex Gaynor
2fe2b5a19f
Support AES-GCM-SIV on BoringSSL (#12294) 2025-01-19 07:55:20 -08:00