Mariatta
b2b00e039c
[2.7] bpo-29738: Fix memory leak in _get_crl_dp (GH-526) (GH-1144)
...
* Remove conditional on free of `dps`, since `dps` is now allocated for
all versions of OpenSSL
* Remove call to `x509_check_ca` since it was only used to cache
the `crldp` field of the certificate
CRL_DIST_POINTS_free is available in all supported versions of OpenSSL
(recent 0.9.8+) and LibreSSL.
(cherry picked from commit 2849cc34a8 )
2017-04-14 18:24:22 -07:00
Donald Stufft
f1a696efd6
bpo-29697: Don't use OpenSSL <1.0.2 fallback on 1.1+ (GH-399)
2017-03-02 12:37:07 -05:00
Christian Heimes
6663eb6b72
Issue #27691 : Fix ssl module's parsing of GEN_RID subject alternative name fields in X.509 certs.
2016-09-06 23:25:35 +02:00
Christian Heimes
9940633e89
Issue #26470 : Use short name rather than name for compression name to fix #27958 .
2016-09-06 01:10:39 +02:00
Christian Heimes
c2fc7c4f53
Issue #26470 : Port ssl and hashlib module to OpenSSL 1.1.0.
2016-09-05 23:37:13 +02:00
Martin Panter
8c6849bfe6
Issue #23804 : Fix SSL zero-length recv() calls to not block and raise EOF
2016-07-11 00:17:13 +00:00
Benjamin Peterson
42e1029564
assume egd unless OPENSSL_NO_EGD is defined—remove configure check ( closes #24557 )
2016-07-07 00:02:31 -07:00
Benjamin Peterson
b3e073cbb3
fix leak of keyfile_bytes
2016-06-08 23:18:51 -07:00
Benjamin Peterson
3b91de5a76
stop leaking certfile_bytes ( closes #27267 )
2016-06-08 23:16:36 -07:00
Serhiy Storchaka
763a61ca95
Issue #26200 : Added Py_SETREF and replaced Py_XSETREF with Py_SETREF
...
in places where Py_DECREF was used.
2016-04-10 18:05:12 +03:00
Serhiy Storchaka
bc62af1bbe
Issue #22570 : Renamed Py_SETREF to Py_XSETREF.
2016-04-06 09:51:18 +03:00
Martin Panter
b8089b4dde
Issue #26644 : Raise ValueError for negative SSLSocket.recv() and read()
2016-03-27 05:35:19 +00:00
Benjamin Peterson
b2e3946d76
open the cert store readonly
...
Patch from Chi Hsuan Yen.
2016-02-17 22:13:19 -08:00
Serhiy Storchaka
5951f2300f
Issue #20440 : Massive replacing unsafe attribute setting code with special
...
macro Py_SETREF.
2015-12-24 10:35:35 +02:00
Benjamin Peterson
93ed946dd9
rm trailing ws
2015-11-14 15:12:38 -08:00
Benjamin Peterson
c591936789
fix possible memory lea k in _get_aia_uri ( closes #25578 )
2015-11-14 15:12:18 -08:00
Benjamin Peterson
b1c1e673cb
fix build with older openssl ( #25569 )
2015-11-14 00:09:22 -08:00
Benjamin Peterson
10aaca9941
always set OP_NO_SSLv3 by default ( closes #25530 )
2015-11-11 22:38:41 -08:00
Benjamin Peterson
59d451d68f
fix memory leak in _get_crl_dp ( closes #25569 )
...
Patch started by Stéphane Wirtel.
2015-11-11 22:07:38 -08:00
Serhiy Storchaka
c72e66a048
Issue #25523 : Backported a-to-an corrections.
2015-11-02 15:06:09 +02:00
Benjamin Peterson
65192c1756
improve style of the convert macro ( #24655 )
...
Patch by Brian Cain.
2015-07-18 10:59:13 -07:00
Benjamin Peterson
9c5a8d4e23
remove extra arguments in arg parsing format codes ( closes #23875 )
2015-04-06 13:05:22 -04:00
Benjamin Peterson
72ef961059
expose X509_V_FLAG_TRUSTED_FIRST
2015-03-04 22:49:41 -05:00
Benjamin Peterson
b1ebba5bd5
enable X509_V_FLAG_TRUSTED_FIRST when possible ( closes #23476 )
2015-03-04 22:11:12 -05:00
Antoine Pitrou
34c8d98306
Issue #23576 : Avoid stalling in SSL reads when EOF has been reached in the SSL layer but the underlying connection hasn't been closed.
2015-03-04 20:51:55 +01:00