Benjamin Peterson
|
43b842775f
|
remove extra arguments in arg parsing format codes (closes #23875)
|
2015-04-06 13:05:22 -04:00 |
|
Benjamin Peterson
|
990fcaac3c
|
expose X509_V_FLAG_TRUSTED_FIRST
|
2015-03-04 22:49:41 -05:00 |
|
Benjamin Peterson
|
fdb1971587
|
enable X509_V_FLAG_TRUSTED_FIRST when possible (closes #23476)
|
2015-03-04 22:11:12 -05:00 |
|
Antoine Pitrou
|
f7f3b0a14a
|
Issue #23576: Avoid stalling in SSL reads when EOF has been reached in the SSL layer but the underlying connection hasn't been closed.
|
2015-03-04 20:51:55 +01:00 |
|
Serhiy Storchaka
|
1a1ff29659
|
Issue #23446: Use PyMem_New instead of PyMem_Malloc to avoid possible integer
overflows. Added few missed PyErr_NoMemory().
|
2015-02-16 13:28:22 +02:00 |
|
Victor Stinner
|
fcfed19913
|
Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. The
availability of the function is checked during the compilation. Patch written
by Bernard Spil.
|
2015-01-06 13:54:58 +01:00 |
|
Benjamin Peterson
|
e32467cf6a
|
allow ssl module to compile if openssl doesn't support SSL 3 (closes #22935)
Patch by Kurt Roeckx.
|
2014-12-05 21:59:35 -05:00 |
|
Benjamin Peterson
|
7243b574e5
|
don't require OpenSSL SNI to pass hostname to ssl functions (#22921)
Patch by Donald Stufft.
|
2014-11-23 17:04:34 -06:00 |
|
Victor Stinner
|
cd75298611
|
Issue #21781, _ssl: Fix asn1obj2py() on Windows 64-bit, "s#" format requires
size to be a Py_ssize_t, not an int. _ssl.c is now "Py_ssize_t clean".
|
2014-07-07 21:52:29 +02:00 |
|
Victor Stinner
|
2e57b4e488
|
Issue #21781: Make the ssl module "ssize_t clean" for parsing parameters.
ssl.RAND_add() now supports strings longer than 2 GB.
|
2014-07-01 16:37:17 +02:00 |
|
Antoine Pitrou
|
0bebbc33fa
|
Issue #21015: SSL contexts will now automatically select an elliptic curve for ECDH key exchange on OpenSSL 1.0.2 and later, and otherwise default to "prime256v1".
(should also fix a buildbot failure introduced by #20995)
|
2014-03-22 18:13:50 +01:00 |
|
Gregory P. Smith
|
83fed26953
|
avoid a compiler warning about assigning const char * to char *.
|
2014-01-17 12:09:05 -08:00 |
|
Gregory P. Smith
|
f34890937b
|
avoid a compiler warning about assigning const char * to char *.
|
2014-01-17 12:08:49 -08:00 |
|
Antoine Pitrou
|
78ace81c93
|
Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for.
|
2014-01-09 20:09:03 +01:00 |
|
Antoine Pitrou
|
2f7c31678a
|
Remove conditional: it is useless at this point (OpenSSL headers are not yet included)
|
2014-01-09 20:07:41 +01:00 |
|
Antoine Pitrou
|
cd3d7cabef
|
Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for.
|
2014-01-09 20:02:20 +01:00 |
|
Victor Stinner
|
36e96b8716
|
(Merge 3.3) Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now
raise a ValueError if num is negative (instead of raising a SystemError).
|
2013-12-19 16:47:25 +01:00 |
|
Victor Stinner
|
1e81a399a2
|
Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now raise a
ValueError if num is negative (instead of raising a SystemError).
|
2013-12-19 16:47:04 +01:00 |
|
Christian Heimes
|
1aa9a75fbf
|
Issue #19509: Add SSLContext.check_hostname to match the peer's certificate
with server_hostname on handshake.
|
2013-12-02 02:41:19 +01:00 |
|
Christian Heimes
|
470fba1f9f
|
SNI was added in OpenSSL 0.9.8f [11 Oct 2007], too
|
2013-11-28 15:12:15 +01:00 |
|
Christian Heimes
|
2427b50fdd
|
Issue #8813: X509_VERIFY_PARAM is only available on OpenSSL 0.9.8+
The patch removes the verify_flags feature on Mac OS X 10.4 with OpenSSL 0.9.7l 28 Sep 2006.
|
2013-11-23 11:24:32 +01:00 |
|
Christian Heimes
|
5398e1a56e
|
Issue #19448: report name / NID in exception message of ASN1Object
|
2013-11-22 16:20:53 +01:00 |
|
Christian Heimes
|
f22e8e5426
|
Issue #18147: Add missing documentation for SSLContext.get_ca_certs().
Also change the argument name to the same name as getpeercert()
|
2013-11-22 02:22:51 +01:00 |
|
Christian Heimes
|
44109d7de7
|
Issue #17134: Finalize interface to Windows' certificate store. Cert and
CRL enumeration are now two functions. enum_certificates() also returns
purpose flags as set of OIDs.
|
2013-11-22 01:51:30 +01:00 |
|
Christian Heimes
|
1dbf61fa46
|
downcast len to int. The code has already checked that len < INT_MAX
|
2013-11-22 00:34:18 +01:00 |
|