William Woodruff 73d070e853 Path validation: builder/verifier API skeletons (#9405) ... * src, tests: flatten all changes Signed-off-by: William Woodruff <william@trailofbits.com> validation: remove Profile abstract from public APIs One step towards removing it entirely Signed-off-by: William Woodruff <william@trailofbits.com> policy: disambiguate references Signed-off-by: William Woodruff <william@trailofbits.com> policy: remove separate rfc5280 profile Signed-off-by: William Woodruff <william@trailofbits.com> policy: remove profile abstraction entirely Signed-off-by: William Woodruff <william@trailofbits.com> rust: permitted_algorithms filtering Signed-off-by: William Woodruff <william@trailofbits.com> verify: simplify policy API substantially No more manual monomorphization. Signed-off-by: William Woodruff <william@trailofbits.com> src, tests: remove verification code Signed-off-by: William Woodruff <william@trailofbits.com> validation: remove more validation code Signed-off-by: William Woodruff <william@trailofbits.com> * cryptography, rust: lintage Signed-off-by: William Woodruff <william@trailofbits.com> * cryptography, rust: lintage, add Policy.subject API Signed-off-by: William Woodruff <william@trailofbits.com> * src, tests: initial PolicyBuilder tests Signed-off-by: William Woodruff <william@trailofbits.com> * verify: Policy.validation_time getter Signed-off-by: William Woodruff <william@trailofbits.com> * push Store into rust Signed-off-by: William Woodruff <william@trailofbits.com> * cleanup, fixup Signed-off-by: William Woodruff <william@trailofbits.com> * tests: lintage Signed-off-by: William Woodruff <william@trailofbits.com> * src: lintage Signed-off-by: William Woodruff <william@trailofbits.com> * tests: fix linter warning * policy: apply the relevant parts of trail-of-forks/cryptography/pull/3 Signed-off-by: William Woodruff <william@trailofbits.com> * policy: typo Signed-off-by: William Woodruff <william@trailofbits.com> * fixup type hints Signed-off-by: William Woodruff <william@trailofbits.com> * drop dep Not used, yet. Signed-off-by: William Woodruff <william@trailofbits.com> * Revert "drop dep" This reverts commit a5154e1245e666a79838cd73784884fad6743e7f. * mod: remove permits_* bodies Will include these in a subsequent PR. Signed-off-by: William Woodruff <william@trailofbits.com> * src: drop certificate helpers as well Not needed yet. Signed-off-by: William Woodruff <william@trailofbits.com> * verify: remove unneeded explicit lifetimes Signed-off-by: William Woodruff <william@trailofbits.com> * tests: builder API coverage Signed-off-by: William Woodruff <william@trailofbits.com> * tests: more coverage Signed-off-by: William Woodruff <william@trailofbits.com> * type hints Signed-off-by: William Woodruff <william@trailofbits.com> * unused derives Signed-off-by: William Woodruff <william@trailofbits.com> * validation: more coverage Signed-off-by: William Woodruff <william@trailofbits.com> * policy: more cov Signed-off-by: William Woodruff <william@trailofbits.com> * policy: more coverage Signed-off-by: William Woodruff <william@trailofbits.com> * policy: add some known bad testcases Signed-off-by: William Woodruff <william@trailofbits.com> * policy: coverage Signed-off-by: William Woodruff <william@trailofbits.com> * validation: remove trust_store Not yet used. Signed-off-by: William Woodruff <william@trailofbits.com> * ops: add NullOps test Signed-off-by: William Woodruff <william@trailofbits.com> * x509: reimplement verify_directly_issued_by via CryptoOps Tests fail, but this gets the right coverage. Signed-off-by: William Woodruff <william@trailofbits.com> * ops: use results Signed-off-by: William Woodruff <william@trailofbits.com> * src, tests: last cov, hopefully Signed-off-by: William Woodruff <william@trailofbits.com> * test: lintage Signed-off-by: William Woodruff <william@trailofbits.com> * docs: fill in API docs Signed-off-by: William Woodruff <william@trailofbits.com> * rust: uniform imports Signed-off-by: William Woodruff <william@trailofbits.com> * minimize for MVP No configurable profile, Web PKI only. Signed-off-by: William Woodruff <william@trailofbits.com> * verify: remove old NOTE Signed-off-by: William Woodruff <william@trailofbits.com> * verify: remove another old NOTE Signed-off-by: William Woodruff <william@trailofbits.com> * src, tests: fixup tests Signed-off-by: William Woodruff <william@trailofbits.com> * docs: cleanup Signed-off-by: William Woodruff <william@trailofbits.com> * src, tests: drop support for missing subjects As part of the MVP. Signed-off-by: William Woodruff <william@trailofbits.com> * profile: remove old comments Signed-off-by: William Woodruff <william@trailofbits.com> * policy: remove some verify-adjacent APIs Paring down for review. Signed-off-by: William Woodruff <william@trailofbits.com> * policy: remove more verify-adjacent APIs Signed-off-by: William Woodruff <william@trailofbits.com> * policy: remove some From impls Signed-off-by: William Woodruff <william@trailofbits.com> * policy: remove rfc5280 constructor Signed-off-by: William Woodruff <william@trailofbits.com> * docs: declutter diff Signed-off-by: William Woodruff <william@trailofbits.com> * profile: prune even more state Signed-off-by: William Woodruff <william@trailofbits.com> * policy: remove old TODO Signed-off-by: William Woodruff <william@trailofbits.com> * policy: remove PolicyError For now. Signed-off-by: William Woodruff <william@trailofbits.com> * docs: typo Signed-off-by: William Woodruff <william@trailofbits.com> * ops: remove NullOps Signed-off-by: William Woodruff <william@trailofbits.com> * rust: remove dev-dep, don't use import Signed-off-by: William Woodruff <william@trailofbits.com> * rust: fix IP_ADDRESS rename Signed-off-by: William Woodruff <william@trailofbits.com> * docs: clarify time behavior Signed-off-by: William Woodruff <william@trailofbits.com> * rename webpki() to new() Since it doesn't actually do anything WebPKI related at the moment. Signed-off-by: William Woodruff <william@trailofbits.com> * docs: relocate Signed-off-by: William Woodruff <william@trailofbits.com> * verify: FixedPolicy -> PyCryptoPolicy Signed-off-by: William Woodruff <william@trailofbits.com> * verify: simplify SubjectOwner substantially Signed-off-by: William Woodruff <william@trailofbits.com> * verify: remove getter helper Signed-off-by: William Woodruff <william@trailofbits.com> * verify: reloc TODO Signed-off-by: William Woodruff <william@trailofbits.com> --------- Signed-off-by: William Woodruff <william@trailofbits.com> Co-authored-by: Facundo Tuesca <facundo.tuesca@trailofbits.com>		2023-09-16 20:56:11 +00:00
..
certificate-transparency.rst	embrace my inner nitpicker (#8361)	2023-02-20 23:57:08 +00:00
index.rst	docs: add Store docs (#9416)	2023-08-14 18:48:27 +00:00
ocsp.rst	OCSP responses are responses, not certificates (#8696)	2023-04-10 03:32:50 +00:00
reference.rst	support PSS signing for CSRs (#9514)	2023-08-28 23:24:33 +00:00
tutorial.rst	Finish replacing utcnow (#9260)	2023-07-18 12:37:00 +00:00
verification.rst	Path validation: builder/verifier API skeletons (#9405)	2023-09-16 20:56:11 +00:00