sort by:
Revision Author Date Message Commit Date
491fd7c Funcs macros gone (#3695) * No more FUNCS/MACROS distinction * change the docs to not talk about MACROS since they're gone * remove out of date comment 27 June 2017, 21:15:37 UTC
0145873 parametrize the wheel builder to support out of order releases (#3731) 27 June 2017, 04:56:45 UTC
e3a2fb2 remove python 3.3 from CI (#3729) * remove python 3.3 from CI * remove 3.3 everywhere, not just from CI 27 June 2017, 01:08:33 UTC
62c3421 enable wconversion and finish fixes (#3728) * enable wconversion and finish fixes * don't pass -Wconversion if it's win32 27 June 2017, 01:07:48 UTC
caad666 bind DTLS 1.2 methods (#3725) * bind DTLS 1.2 methods * remove version specific dtls bindings, rename sentinel value 27 June 2017, 01:07:25 UTC
b867003 some wconversion fixes (#3727) 26 June 2017, 20:37:11 UTC
3662b8c our build function was shadowing the build builtin. whoops. (#3726) 26 June 2017, 11:13:15 UTC
8c0e731 start testing against alpine (#3724) Drop jessie-libre 2.5.4 since alpine uses libre (boo) 25 June 2017, 22:22:07 UTC
fe2b174 Remove entry_points from setup.py (#3723) 25 June 2017, 18:09:11 UTC
5bc8c7d doc the relationship between PrivateKey and PrivateKeyWithSerialization (#3721) * doc the relationship between PrivateKey and PrivateKeyWithSerialization Or at least do it better. * let's talk about opaque keys 24 June 2017, 23:21:20 UTC
2748e2e Reorganize DHParameters and DHPublicKey *WithSerialization (#3722) * Reorganize DHParameters and DHPublicKey *WithSerialization fixes #3720 * fix up the changelog 24 June 2017, 23:20:15 UTC
1b714f7 pypy3 compilation fix for locking callback (#3716) * pypy3 fix on macos using work from the pypy project https://bitbucket.org/pypy/pypy/commits/198dc138680f96c391802fa1e77b8b6d2e0134e6?at=py3.5 * change abort error msg and fix wrong type * oh windows * remove an unused variable * rename mutex1_t, use calloc, small style fixes * calloc correctly * (call) 24 June 2017, 21:51:12 UTC
653cfe8 add missing methods to DH interfaces (#3719) 24 June 2017, 20:12:18 UTC
361a9fc changelog entry and a few updates to the new DH params docs (#3718) 24 June 2017, 20:12:04 UTC
6b08aba Dh parameters serialization (#3504) * Support DH parameter serizalization - no X9.42 * Support X9.42 serialization - DER not working * Fix dhp_rfc5114_2.der Changing the DER parameters serialization after the fix in openssl commit a292c9f1b835 * DH parameters X9.42 DER serialization fixed * fix _skip_dhx_unsupported * document DH parameter_bytes * PEP8 fixes * Document load_pem_parameters * Document load_der_parameters * document ParameterFormat * Increase test coverage * Increase test covrage * Remove unneeded check * Fix typo * Fix error in load_der_parameters * Add load_pem_parameters and load_der_parameters to interfaces * CR fixes * Removed unverified phrase * Update version to 2.0 * Fix pep8 * Rename ParameterFormat.ASN1 to ParameterFormat.DHParameter * link pkcs3 * Add new line at end of file to serialization.rst * Rename DHparameters to PKCS3 * doc CR fix 24 June 2017, 19:00:28 UTC
1cff0c0 Add DERSerializationBackend to test_dh serialization tests (#3717) 24 June 2017, 15:12:26 UTC
3dccf6a be clearer that 65537 is the right answer (#3714) * be clearer that 65537 is the right answer * Different language * remove trailing whitespace 23 June 2017, 11:31:51 UTC
33a41e7 implement CCM vector parser (#3699) 21 June 2017, 11:39:20 UTC
a923b00 ed25519 vector loader (#3707) * ed25519 vector loader * refactor to use unpacking 20 June 2017, 11:12:35 UTC
2ff4d01 Removed executable bit from vectors (#3708) 19 June 2017, 14:59:18 UTC
312ed09 disallow empty string for NameAttribute (#3711) 19 June 2017, 11:00:42 UTC
63df010 add pypy3.5 to our test matrix (#3709) * add pypy3.5 to our test matrix * pypy-nocoverage time 19 June 2017, 10:59:13 UTC
c38e550 add FAQ entry for failed to install (#3710) 19 June 2017, 10:54:12 UTC
e67354e add NIST CAVP CCM vectors (#3698) http://csrc.nist.gov/groups/STM/cavp/documents/mac/ccmtestvectors.zip No TLS :( 19 June 2017, 00:35:05 UTC
e45151c update pythons and pypy, a little prep for pypy3 in CI again (#3702) * update pythons and pypy, a little prep for pypy3 in CI again * slightly renamed * oops * pypy renames all around 19 June 2017, 00:32:59 UTC
9e19428 fix typo in docs for curve name (#3705) fixes #3704 14 June 2017, 20:28:53 UTC
61858f3 It's a method you must call (#3696) Fix misworded guidance for how to serialize a private key to bytes. 09 June 2017, 21:18:55 UTC
3e357f7 X25519 Support (#3686) * early days * sort of working * more things * remove private_bytes * public bytes, interface fix * load public keys * x25519 support basically done now * private_bytes is gone * some reminders * doctest this too * remove a thing that doesn't matter * x25519 supported checks * libressl has the NID, but a different API, so check for OpenSSL * pep8 * add missing coverage * update to use reasons * expand test a little * add changelog entry * review feedback 09 June 2017, 12:31:30 UTC
7e53d91 ChaCha20Poly1305 support (#3680) * chacha20poly1305 support * add chacha20poly1305 backend and some fixes * refactor * forgot to remove this * pep8 * review feedback and a lot of type/value checking * review feedback * raise unsupportedalgorithm when creating a ChaCha20Poly1305 object if it's not supported. * switch to ciphertext||tag * typo * remove a branch we don't need * review feedback * decrypts is *also* a word * use reasons 08 June 2017, 04:08:57 UTC
f12955c scrypt can be doctested now that we're using 1.1.0 (#3688) 07 June 2017, 12:20:33 UTC
8ba4756 compile all our mac builds against 1.1.0 in travis (#3689) * compile all our mac builds against 1.1.0 in travis * Just install * try this why not * ... * of course * upgrade the existing openssl 07 June 2017, 04:31:02 UTC
6bdae78 run our docs job using 1.1.0 (#3687) 06 June 2017, 18:45:01 UTC
cfdc605 add X25519 test vectors from RFC 7748 section 5.2 (#3685) 06 June 2017, 12:01:03 UTC
34036d6 bind even more evp (#3684) * bind even more evp * oops 06 June 2017, 11:57:35 UTC
e2e8782 Do more retries in linkcheck because NIST websites are down a lot (#3683) 06 June 2017, 01:51:48 UTC
023eccf bind EVP_PKEY_get1_tls_encodedpoint because X25519 (#3682) 06 June 2017, 00:45:44 UTC
580f434 add EVP_PKEY_keygen and EVP_PKEY_keygen_init for x25519/ed25519 (#3681) * add EVP_PKEY_keygen and EVP_PKEY_keygen_init for x25519/ed25519 * add a few more bindings we'll need for X25519 05 June 2017, 11:04:54 UTC
a8ba665 bind EVP_CTRL_AEAD even when on < 1.1.0 (#3679) 05 June 2017, 02:42:16 UTC
cf7b354 when you :%s/\:/=/g sometimes there's a colon you shouldn't have touched (#3678) 05 June 2017, 01:02:58 UTC
5afd569 Change the link to appease linkcheck (#3677) 04 June 2017, 23:25:53 UTC
e3ff364 fix symmetric encryption interfaces heading (#3676) 04 June 2017, 21:48:32 UTC
a8b1c6e document invalidtag (#3675) * document invalidtag * move invalidtag 04 June 2017, 21:48:24 UTC
66dcd38 add ChaCha20Poly1305 test vectors from OpenSSL/RFC7539 (#3673) * add ChaCha20Poly1305 test vectors from OpenSSL/RFC7539 * add the boringssl tests as well * highlight the lines 04 June 2017, 21:09:03 UTC
3ff51d4 typo fix (#3674) 04 June 2017, 20:38:55 UTC
3661011 Remove a line from "Why do we exist" (#3672) I have no idea what this meant 04 June 2017, 20:02:09 UTC
eadebec Refs #3646 -- include stdout in the output when spawning a process fails in the release script (#3671) 04 June 2017, 19:51:09 UTC
6a0718f Refs #3461 -- parse SCTs from x.509 extension (#3480) * Stub API for SCTs, feedback wanted * grr, flake8 * finish up the __init__ * Initial implementation and tests * write a test. it fails because computer * get the tests passing and fix some TODOs * changelog entry * This can go now * Put a skip in this test * grump * Removed unreachable code * moved changelog to the correct section * Use the deocrator for expressing requirements * This needs f for the right entry_type * coverage * syntax error * tests for coverage * better sct eq tests * docs * technically correct, the most useless kind of correct * typo and more details * bug * drop __eq__ 04 June 2017, 17:36:58 UTC
140ec5d Fixes #2347 -- link to the stdlib secrets module in our random number generation section (#3669) 04 June 2017, 15:51:31 UTC
1a5d70e deprecate signer/verifier on asymmetric keys (#3663) * deprecate signer/verifier on asymmetric keys * review feedback, switch deprecated_call to work around a bug 04 June 2017, 03:11:55 UTC
e6055fb call check_backend_support directly from backend fixture (#3666) 04 June 2017, 02:02:50 UTC
133a179 Switched our backend to be a normal fixture in tests (#3665) 04 June 2017, 00:38:22 UTC
cb17506 revert codecov.yml workaround and pin coverage to 4.3.4 (#3662) * Revert "Attempted workaround for intermittent coverage issues (#3661)" This reverts commit 84a634c1e7645970382a3a271dfae9ef95685e7a. * pin coverage to 4.3.4 03 June 2017, 18:26:56 UTC
84a634c Attempted workaround for intermittent coverage issues (#3661) The root cause is https://bitbucket.org/ned/coveragepy/issues/578/incomplete-file-path-in-xml-report 03 June 2017, 17:49:54 UTC
42b2571 Fixes #3653 -- attempt to retry git clones up to 3 times (#3660) 03 June 2017, 16:04:32 UTC
26fcc5c make signature and verification contexts error better re: prehashed (#3658) * make signature and verification contexts error better re: prehashed * code review feedback 02 June 2017, 17:51:09 UTC
a7e9a22 Simplify git clones in Jenkinsfile (#3654) 01 June 2017, 15:02:14 UTC
5f84523 FreeBSD 10 and higher use Fortuna, not Yarrow (#3652) 01 June 2017, 12:29:16 UTC
b637aec runtime detection of getentropy for macOS via weak-linking (#3650) * runtime detection of getentropy for macOS via weak-linking In the before time, in the long long ago, there was a desire to use getentropy on macOS. So some code was written and it detected getentropy support by seeing if SYS_getentropy was available in the headers. But lo, it turns out Apple ships headers for different SDK versions and users on < 10.12 were getting headers that had SYS_getentropy even though their OS did not support it. There was much wailing and gnashing of teeth, but the frustrated developers remembered that Apple wants their developers to use weak linking. With weak linking the mighty developer can specify a minimum version and any symbol that was added after that version will be weakly linked. Then, at runtime, the dynamic linker will make unavailable symbols thus marked into NULLs. So, the developer need only alter their code to do runtime detection of weakly linked symbols and then a single binary may be compiled that will correctly select getentropy or /dev/urandom at runtime. Hallelujah! * oops * separate the enum * okay just apple 31 May 2017, 01:56:15 UTC
5ca7eb7 move files to make the next PR easier to read (#3651) 30 May 2017, 20:40:07 UTC
24f3d5b Remove a binding that hasn't been used for a while (#3643) 30 May 2017, 13:11:10 UTC
ece3af1 for humans is irritating, let's stop saying it (#3647) 30 May 2017, 04:03:10 UTC
1d08e51 download artifacts from new jenkins (#3645) turns out new jenkins changed its JSON a bit. 30 May 2017, 03:23:56 UTC
b90e8d8 Post release tasks to open master for 2.0 (#3644) 30 May 2017, 03:10:39 UTC
23ead43 1.9 version bump and changelog (#3641) 30 May 2017, 02:10:46 UTC
66e6695 update to new CI server for wheels + switch to using a job token (#3638) * update to new CI server for wheels + switch to using a job token * avoid slash folding 30 May 2017, 01:48:37 UTC
5a284e6 update the docs with new jenkins CI URL & mac openssl upgrade process (#3639) 29 May 2017, 22:09:23 UTC
0db218e reorder the primitives list and improve a few titles (#3640) 29 May 2017, 22:09:05 UTC
cc78c30 add a jenkinsfile for building wheels (#3636) * add a jenkinsfile for building wheels * remove scripts we don't need now * still do the list of installed items on the mac builder * build 2.6, don't bother with 2.7 ucs4 on mac, simplify batch 29 May 2017, 21:51:02 UTC
d607dd7 Enlarge _oid2txt buffer to handle larger OIDs (#3612) The OpenSSL manual recommends a buffer size of 80 for OBJ_oid2txt: https://www.openssl.org/docs/crypto/OBJ_nid2ln.html#return_values. But OIDs longer than this occur in real life (e.g. Active Directory makes some very long OIDs). If the length of the stringified OID exceeds the buffer size, allocate a new buffer that is big enough to hold the stringified OID, and re-do the conversion into the new buffer. 29 May 2017, 21:33:20 UTC
7bc3686 move MACContext to mac.py and eliminate interfaces.py (#3631) * move MACContext to mac.py and eliminate interfaces.py finally * improve title * re-add and deprecate interfaces.MACContext * use pytest.warns instead of deprecated_call The pytest docs insist that deprecation warnings are handled differently and that you should use deprecated_call, but this works so okay then 29 May 2017, 15:13:35 UTC
f99d45e add a jenkinsfile for updating homebrew openssl on jenkins builders (#3630) 29 May 2017, 13:51:32 UTC
e10d0d6 reorganize our toc to look nicer and make more sense (#3632) 29 May 2017, 13:49:47 UTC
aef8ebc Ignore linkcheck errors from cryptrec (#3629) 29 May 2017, 04:12:30 UTC
0bff7c2 Simplify int to hex string conversion (#3628) 29 May 2017, 03:16:42 UTC
e4318ea add windows OpenSSL 1.1 jenkinsfile builder (#3624) * add windows OpenSSL 1.1 jenkinsfile builder I tested this before submitting. You can see the output here: https://ci.cryptography.io/blue/organizations/jenkins/openssl-release-1.1/detail/openssl-release-1.1/8/pipeline Once this merges we can switch the jenkins job to pull this directly from the repository. Unfortunately the job does not get created automatically in jenkins, so that's a new step in building our infra * add comments 28 May 2017, 19:01:47 UTC
9bf8174 Sphinx 1.6.2 is also broken (#3627) 28 May 2017, 18:15:42 UTC
6a10b29 Improve accuracy of install docs page (#3626) * Improve accuracy of install docs page * fix line length 28 May 2017, 00:32:26 UTC
a55cc3b Typo fix (#3625) 27 May 2017, 23:00:44 UTC
afa84f1 strongly encourage the use of fernet, document its limitation (#3623) 27 May 2017, 20:11:24 UTC
35acb37 Modify DH/ECDH examples to be explicit for DHE/ECDHE (#3622) * Modify DH/ECDH examples to be explicit for DHE/ECDHE Also add note to DH docs that you should probably use ECDH * give a reason 27 May 2017, 19:58:24 UTC
f916dfc re-add the why of cryptography to the faq with some small updates (#3621) * re-add the why of cryptography to the faq with some small updates * reorder the items a bit 27 May 2017, 19:24:28 UTC
2f29224 Remove unused line from mac wheel builder (#3619) 26 May 2017, 14:41:30 UTC
139b25f port 1.8.2 changelog to master (#3616) * port 1.8.2 changelog to master * we did this in 1.8.2 26 May 2017, 11:32:15 UTC
d36bef0 fix libressl error/refactor some error handling (#3609) * add libre so I can see the error * add the libre error needed and refactor error handling a bit We were historically matching on lib + func + reason, but func is somewhat unstable so now we match on lib + reason only. Of course, in this case libressl changed both lib and reason so it wouldn't have mattered. All error handling from the error queue in openssl is an illusion * fix a typo, probably an unneeded branch * review feedback * refactor tests to support libressl insert additional rant about libre here, although admittedly these tests were assuming stability where openssl itself guarantees none * better assert, fix flake8 26 May 2017, 04:05:00 UTC
3499233 Document when OpenSSL changed its default (#3611) * Figure out when this came into existance by deleting it * Revert "Figure out when this came into existance by deleting it" This reverts commit 2fb9b8e104742bfa12eb5feedccebacfc23c66bb. * Clearly document when this became true 26 May 2017, 03:59:14 UTC
978a5e9 jurisdictionCountryName also must be PrintableString (#3516) * jurisdictionCountryName also must be PrintableString * flake8 + citation * Write a test, which fails. If my analysis is correct, this is blocked on: https://github.com/openssl/openssl/pull/3284 * This is only true on 1.1.0 * clearly express the version requirement 26 May 2017, 01:11:09 UTC
febbfb3 only build master and our release branches (#3601) * only build master and our release branches * review feedback * also build the tags tags are of form `digit . digit` or `digit . digit . digit` * alex is right * that should match 0-1 times, not 0-infinity * so much regex 25 May 2017, 22:42:52 UTC
097f810 1.1.0f for the next release (#3599) 25 May 2017, 22:28:18 UTC
8de58de update to 1.1.0f in travis (#3607) 25 May 2017, 20:57:18 UTC
66e1eb2 add a missing word (#3600) 25 May 2017, 20:56:57 UTC
fca3514 Switch mac wheel builder to use new syntax (#3597) 25 May 2017, 19:29:48 UTC
3b28fdf Remove now unused env var from Windows wheel buidler (#3598) 25 May 2017, 19:29:28 UTC
6e7ea2e fix compilation on 1.1.0f (#3603) 25 May 2017, 17:26:08 UTC
136b324 add some explicit instructions on determining key type in a cert (#3596) * add some explicit instructions on determining key type in a cert * can't call it a CSR 25 May 2017, 02:24:54 UTC
9bab8bd comma comma comma (#3595) 25 May 2017, 01:15:37 UTC
a9b8690 Put the exchange method on the correct interface (#3591) * Put the exchange method on the correct interface * fixed links in docs 24 May 2017, 22:01:14 UTC
bf7b8de update supported versions and some grammar (#3594) 24 May 2017, 20:33:39 UTC
312d75d Update the docs to not be redundant and wrong (#3593) 24 May 2017, 20:18:02 UTC
adeaacf allow global suppression of link flags (#3592) CRYPTOGRAPHY_SUPPRESS_LINK_FLAGS will now suppress link flags regardless of platform. Additionally, CRYPTOGRAPHY_WINDOWS_LINK_LEGACY_OPENSSL is now the flag you need if you want to link against < 1.1.0 on windows. 24 May 2017, 19:49:18 UTC
cd5b47f Removed branches that are now unused (#3589) 24 May 2017, 17:29:37 UTC
back to top