Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add ChaCha_RNG | Jack Lloyd | 2017-07-31 | 8 | -48/+442 |
| | |||||
* | Merge GH #1133 Fix MSVC compiler detection fixing #1125 | Jack Lloyd | 2017-07-31 | 2 | -0/+82 |
|\ | |||||
| * | Use _MSC_VER to get MSVC version | Simon Warta | 2017-07-30 | 2 | -13/+11 |
| | | |||||
| * | Adapt MSVC version regexp to non-english outputs | Simon Warta | 2017-07-30 | 1 | -0/+9 |
| | | |||||
| * | Fix compiler version matching patterns | Simon Warta | 2017-07-30 | 1 | -0/+8 |
| | | |||||
| * | Refactor and test compiler version detection | Simon Warta | 2017-07-30 | 1 | -0/+67 |
| | | |||||
* | | Merge GH #1134 Run pylint on install.py | Jack Lloyd | 2017-07-31 | 2 | -23/+35 |
|\ \ | |||||
| * | | Deduplicate pylint arguments in lint.sh | Simon Warta | 2017-07-30 | 1 | -7/+11 |
| | | | |||||
| * | | Run pylint on install.py in CI | Simon Warta | 2017-07-30 | 1 | -0/+5 |
| | | | |||||
| * | | install.py: silence remaining code style issues in main() | Simon Warta | 2017-07-30 | 1 | -0/+1 |
| | | | |||||
| * | | install.py: let main() explicitly take arguments and return 0 | Simon Warta | 2017-07-30 | 1 | -4/+3 |
| | | | |||||
| * | | install.py: pull out calculate_exec_mode | Simon Warta | 2017-07-30 | 1 | -7/+10 |
| | | | |||||
| * | | install.py: disable two pylint warnings locally | Simon Warta | 2017-07-30 | 1 | -2/+2 |
| | | | |||||
| * | | install.py: fix whitespace issues found by pylint | Simon Warta | 2017-07-30 | 1 | -6/+6 |
| |/ | |||||
* | | Merge GH #1132 Fix Doxygen errors and add -Wdocumentation flag to clang ↵ | Jack Lloyd | 2017-07-31 | 12 | -18/+14 |
|\ \ | | | | | | | | | | maintainer build | ||||
| * | | Add missing override annotation | Jack Lloyd | 2017-07-28 | 1 | -1/+1 |
| | | | |||||
| * | | Fix warnings from clangs -Wdocumentation flag | Jack Lloyd | 2017-07-28 | 11 | -17/+13 |
| |/ | |||||
* | | Merge GH #1131 Confirm OpenSSL supports curve at runtime before attempting ↵ | Jack Lloyd | 2017-07-31 | 1 | -12/+35 |
|\ \ | | | | | | | | | | to use it | ||||
| * | | Check if curve is built into OpenSSL at runtime | René Korthaus | 2017-07-28 | 1 | -12/+35 |
| |/ | |||||
* | | Add test for FFI keywrap, and constify args | Jack Lloyd | 2017-07-31 | 3 | -9/+46 |
| | | |||||
* | | Split up ffi.cpp into several files | Jack Lloyd | 2017-07-31 | 19 | -2314/+2552 |
| | | | | | | | | | | It was getting pretty big and would get worse over time, eg whenver I get around to adding TLS support. | ||||
* | | Merge GH #1128 Improve FFI exception safety | Jack Lloyd | 2017-07-31 | 5 | -703/+368 |
|\ \ | |||||
| * | | Add missing return in ffi_delete_object | Jack Lloyd | 2017-07-25 | 1 | -4/+5 |
| | | | | | | | | | | | | | | | Somehow this still passed all the tests, downside of 0 as the success return I suppose. | ||||
| * | | Merge commit 'e015fd170' into ffi-fixes | Jack Lloyd | 2017-07-25 | 3 | -2/+13 |
| |\ \ | | | | | | | | | | | | | From PR #1097 | ||||
| | * | | Don't crash if openssl can't allocate a new context | Kirill A. Korinsky | 2017-06-29 | 3 | -2/+13 |
| | | | | |||||
| * | | | In FFI, check the object magic before deleting | Jack Lloyd | 2017-07-25 | 1 | -30/+42 |
| | | | | | | | | | | | | | | | | | | | | Previously any X_destroy function would just delete its arg regardless of whatever the application passed in. | ||||
| * | | | Better exception guarding in FFI | Jack Lloyd | 2017-07-25 | 2 | -671/+312 |
| | |/ | |/| | | | | | | | | | | Based on PR #1097 but I wanted to decrease the verbosity of the resulting code. | ||||
* | | | Merge GH #1135 Add RFC 3394 keywrap to FFI | Jack Lloyd | 2017-07-31 | 2 | -0/+57 |
|\ \ \ | |/ / |/| | | |||||
| * | | Move declarations above TLS block | Krzysztof Kwiatkowski | 2017-07-30 | 1 | -11/+11 |
| | | | |||||
| * | | FFI: Add interface for key wrapping with RFC 3394 | Krzysztof Kwiatkowski | 2017-06-29 | 2 | -0/+57 |
| | | | |||||
* | | | Merge GH #1123 Add OCSP::Response::certificates API | Jack Lloyd | 2017-07-24 | 2 | -0/+36 |
|\ \ \ | |||||
| * | | | add OCSP::Response::certificates() + unit test | René Meusel | 2017-07-21 | 2 | -0/+36 |
| | | | | |||||
* | | | | Change arbitrary privkey size to a smaller arbitrary number. | Jack Lloyd | 2017-07-24 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | GH #1122 [ci skip] | ||||
* | | | | Revert GH #1119 90e8cbbc02 Causes irregular timeouts on Travis | Jack Lloyd | 2017-07-24 | 1 | -1/+1 |
|/ / / | | | | | | | | | | [ci skip] | ||||
* | | | Merge GH #1119 Run full tests on big-endian ppc qemu | Jack Lloyd | 2017-07-17 | 1 | -1/+1 |
|\ \ \ | |||||
| * | | | Enable all tests on ppc32 cross build | Jack Lloyd | 2017-07-16 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | Ensures big-endian gets tested | ||||
* | | | | Appease shellcheck | Jack Lloyd | 2017-07-17 | 1 | -3/+3 |
|/ / / | |||||
* | | | Merge GH #1110 Fix documentation of PKCS11 module | Jack Lloyd | 2017-07-16 | 1 | -8/+8 |
|\ \ \ | |||||
| * | | | Remove "pkcs11" provider paramater for pk ops in handbook and tests | René Korthaus | 2017-07-04 | 1 | -8/+8 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We have special key types for PKCS#11 public and private keys. When using the PK ops classes, passing the "pkcs11" provider parameter is not necessary, as the PK ops is internally chosen by the PKCS#11 key class, in contrast to other providers such as openssl, which don't have special key classes. Updates the handbook code examples and the tests. | ||||
* | | | | Merge GH #1116 Fix loading of unencrypted PKCS#8 key via CLI | Jack Lloyd | 2017-07-16 | 1 | -10/+16 |
|\ \ \ \ | |||||
| * | | | | Fix loading of unencrypted PKCS#8 key via CLI | René Korthaus | 2017-07-11 | 1 | -10/+16 |
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | CLI passed an emtpy password to PKCS8::load_key(), even if --pass-in was not given, which caused loading of unencrypted private keys to fail. Fixed by calling the corresponding flavour of load_key(). | ||||
* / / / | Fix failure to fully zero memory before free | Jack Lloyd | 2017-07-16 | 1 | -1/+1 |
|/ / / | | | | | | | | | | | | | | | | Introduced in 455bd2557cbb1343e59eefd97cb449f06a702c28 Found and reported by Roman Pozlevich | ||||
* | | | Merge GH #1093 In EC keys, use OID encoding if possible | Jack Lloyd | 2017-07-03 | 1 | -6/+16 |
|\ \ \ | |||||
| * | | | ECC: use OID encoding if possible | Patrick Wildt | 2017-06-30 | 1 | -6/+16 |
| | | | | | | | | | | | | | | | | | | | | | | | | Instead of explicitly encoding the domain, encode them with the OID if the OID is available. This makes the ecdsa_sign test run with OpenSSL, since OpenSSL needs the OID explicitly set. | ||||
| * | | | Revert previous, we should fix it differently. | Patrick Wildt | 2017-06-30 | 1 | -16/+20 |
| | | | | |||||
| * | | | Allow ECDSA tests for OpenSSL by comparing EC Groups | Patrick Wildt | 2017-06-28 | 1 | -20/+16 |
| |/ / | | | | | | | | | | | | | | | | | | | | | | The ecdsa_sign test does not work for OpenSSL since the public key that is derived from the private key does not store the OID of the curve. Thus, the OpenSSL code cannot find the proper NID for the given public key and cannot do a verification operation. We can fix this by comparing the actual groups and not using the OIDs. | ||||
* | | | Merge GH #1107 Improve documentation of x509_path_validate | Jack Lloyd | 2017-07-03 | 1 | -1/+1 |
|\ \ \ | |||||
| * | | | Add position of end entity cert in x509_path_validate() doc [ci skip] | René Korthaus | 2017-07-02 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | It's not so obvious to a user at which end of the chain the end entity certificate must be placed. | ||||
* | | | | Merge GH #1106 Fix sign_cert CLI incorrectly handling --ca-key-pass (GH #1104) | Jack Lloyd | 2017-07-03 | 1 | -2/+4 |
|\ \ \ \ | |||||
| * | | | | Fix sign_cert CLI incorrectly handling --ca-key-pass | René Korthaus | 2017-07-01 | 1 | -2/+4 |
| |/ / / |