blob: c397183f31244eb5ecf6f35b4c75f531c80ef164 [file] [log] [blame]
Jean-Paul Calderone3de9f622008-03-12 14:12:19 -040012008-03-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
2
3 * Fix coding problems in examples/. Remove keys and certificates
4 and add a note about how to generate new ones.
5
Jean-Paul Calderone525ef802008-03-09 20:39:42 -040062008-03-09 Jean-Paul Calderone <exarkun@twistedmatrix.com>
7
8 * src/crypto/x509.c: Add getters and setters for the notBefore and
9 notAfter attributes of X509s.
Jean-Paul Calderoneac0d95f2008-03-10 00:00:42 -040010 * src/crypto/pkey.h, src/crypto/pkey.c, src/crypto/x509req.c,
11 src/crypto/x509.c: Track the initialized and public/private state
12 of EVP_PKEY structures underlying the crypto_PKeyObj type and
13 reject X509Req signature operations on keys not suitable for the
14 task.
Jean-Paul Calderone525ef802008-03-09 20:39:42 -040015
Jean-Paul Calderoneda92ccc2008-03-06 23:48:12 -0500162008-03-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
17
18 * src/crypto/x509name.c: Fix tp_compare so it only returns -1, 0, or
19 1. This eliminates a RuntimeWarning emitted by Python.
20 * src/crypto/x509req.c: Fix reference counting for X509Name returned
21 by X509Req.get_subject. This removes a segfault when the subject
22 name outlives the request object.
23 * src/crypto/x509.c: Change get_serial_number and set_serial_number
24 to accept Python longs.
25 * doc/pyOpenSSL.tex: A number of minor corrections.
26
Jean-Paul Calderone7df40db2008-03-03 15:12:42 -0500272008-03-03 Jean-Paul Calderone <exarkun@twistedmatrix.com>
28
29 * src/crypto/crypto.c: Expose X509_verify_cert_error_string. (patch
30 from Victor Stinner)
31
Jean-Paul Calderone12ea9a02008-02-22 12:24:39 -0500322008-02-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
33
34 * src/ssl/connection.c src/ssl/context.c src/ssl/ssl.c: Fix
35 compilation on Windows. (patch from Michael Schneider)
36
Jean-Paul Calderone72b8f0f2008-02-21 23:57:40 -0500372008-02-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
38
39 * src/ssl/connection.c: Expose SSL_get_shutdown and
40 SSL_set_shutdown. (patch from James Knight)
41 * src/ssl/ssl.c: Expose SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN.
42 (patch from James Knight)
43
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -0500442008-02-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
45
46 * src/ssl/context.c: Expose SSL_CTX_add_extra_chain_cert.
47 * src/crypto/x509name.c: Fix memory leaks in __getattr__ and
48 __setattr_ implementations.
Jean-Paul Calderone19555b92008-02-19 22:29:57 -050049 * src/crypto/x509.c: Fix memory leak in X509.get_pubkey().
50 * leakcheck/: An attempt at a systematic approach to leak
51 elimination.
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -050052
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500532004-08-13 Martin Sjögren <msjogren@gmail.com>
54
55 * Released version 0.6.
56
572004-08-11 Martin Sjögren <msjogren@gmail.com>
58
59 * doc/pyOpenSSL.tex: Updates to the docs.
60
612004-08-10 Martin Sjögren <msjogren@gmail.com>
62
63 * src/crypto/x509.c: Add X509.add_extensions based on a patch
64 from Han S. Lee.
65 * src/ssl/ssl.c: Add more SSL_OP_ constants. Patch from Mihai
66 Ibanescu.
67
682004-08-09 Martin Sjögren <msjogren@gmail.com>
69
70 * setup.py src/crypto/: Add support for Netscape SPKI extensions
71 based on a patch from Tollef Fog Heen.
72 * src/crypto/crypto.c: Add support for python passphrase callbacks
73 based on a patch from Robert Olson.
74
752004-08-03 Martin Sjögren <msjogren@gmail.com>
76
77 * src/ssl/context.c: Applied patch from Frederic Peters to add
78 Context.use_certificate_chain_file.
79 * src/crypto/x509.c: Applid patch from Tollef Fog Heen to add
80 X509.subject_name_hash and X509.digest.
81
822004-08-02 Martin Sjögren <msjogren@gmail.com>
83
84 * src/crypto/crypto.c src/ssl/ssl.c: Applied patch from Bastian
85 Kleineidam to fix full names of exceptions.
86
872004-07-19 Martin Sjögren <msjogren@gmail.com>
88
89 * doc/pyOpenSSL.tex: Fix the errors regarding X509Name's field names.
90
912004-07-18 Martin Sjögren <msjogren@gmail.com>
92
93 * examples/certgen.py: Fixed wrong attributes in doc string, thanks
94 Remy. (SFbug#913315)
95 * __init__.py, setup.py, version.py: Add __version__, as suggested by
96 Ronald Oussoren in SFbug#888729.
97 * examples/proxy.py: Fix typos, thanks Mihai Ibanescu. (SFpatch#895820)
98
992003-01-09 Martin Sjögren <martin@strakt.com>
100
101 * Use cyclic GC protocol in SSL.Connection, SSL.Context, crypto.PKCS12
102 and crypto.X509Name.
103
1042002-12-02 Martin Sjögren <martin@strakt.com>
105
106 * tsafe.py: Add some missing methods.
107
1082002-10-06 Martin Sjögren <martin@strakt.com>
109
110 * __init__.py: Import tsafe too!
111
1122002-10-05 Martin Sjögren <martin@strakt.com>
113
114 * src/crypto/x509name.c: Use unicode strings instead of ordinary
115 strings in getattr/setattr. Note that plain ascii strings should
116 still work.
117
1182002-09-17 Martin Sjögren <martin@strakt.com>
119
120 * Released version 0.5.1.
121
1222002-09-09 Martin Sjögren <martin@strakt.com>
123
124 * setup.cfg: Fixed build requirements for rpms.
125
1262002-09-07 Martin Sjögren <martin@strakt.com>
127
128 * src/ssl/connection.c: Fix sendall() method. It segfaulted because
129 it was too generous about giving away the GIL.
130 * Added SecureXMLRPCServer example, contributed by Michal Wallace.
131
1322002-09-06 Martin Sjögren <martin@strakt.com>
133
134 * setup.cfg: Updated the build requirements.
135 * src/ssl/connection.c: Fix includes for AIX.
136
1372002-09-04 Anders Hammarquist <iko@strakt.com>
138
139 * Added type checks in all the other places where we expect
140 specific types of objects passed.
141
1422002-09-04 Martin Sjögren <martin@strakt.com>
143
144 * src/crypto/crypto.c: Added an explicit type check in the dump_*
145 functions, so that they won't die when e.g. None is passed in.
146
1472002-08-25 Martin Sjögren <martin@strakt.com>
148
149 * doc/pyOpenSSL.tex: Docs for PKCS12.
150
1512002-08-24 Martin Sjögren <martin@strakt.com>
152
153 * src/crypto: Added basic PKCS12 support, thanks to Mark Welch
154 <mark@collab.net>
155
1562002-08-16 Martin Sjögren <martin@strakt.com>
157
158 * D'oh! Fixes for python 1.5 and python 2.1.
159
1602002-08-15 Martin Sjögren <martin@strakt.com>
161
162 * Version 0.5. Yay!
163
1642002-07-25 Martin Sjögren <martin@strakt.com>
165
166 * src/ssl/context.c: Added set_options method.
167 * src/ssl/ssl.c: Added constants for Context.set_options method.
168
1692002-07-23 Martin Sjögren <martin@strakt.com>
170
171 * Updated docs
172 * src/ssl/connection.c: Changed the get_cipher_list method to actually
173 return a list! WARNING: This change makes the API incompatible with
174 earlier versions!
175
1762002-07-15 Martin Sjögren <martin@strakt.com>
177
178 * src/ssl/connection.[ch]: Removed the fileno method, it uses the
179 transport object's fileno instead.
180
1812002-07-09 Martin Sjögren <martin@strakt.com>
182
183 * src/crypto/x509.c src/crypto/x509name.c: Fixed segfault bug where
184 you used an X509Name after its X509 had been destroyed.
185 * src/crypto/crypto.[ch] src/crypto/x509req.c src/crypto/x509ext.[ch]:
186 Added X509 Extension support. Thanks to maas-Maarten Zeeman
187 <maas@awanim.com>
188 * src/crypto/pkey.c: Added bits() and type() methods.
189
1902002-07-08 Martin Sjögren <martin@strakt.com>
191
192 * src/ssl/connection.c: Moved the contents of setup_ssl into the
193 constructor, thereby fixing some segfault bugs :)
194 * src/ssl/connection.c: Added connect_ex and sendall methods.
195 * src/crypto/x509name.c: Cleaned up comparisons and NID lookup.
196 Thank you Maas-Maarten Zeeman <maas@awanim.com>
197 * src/rand/rand.c: Fix RAND_screen import.
198 * src/crypto/crypto.c src/crypto/pkcs7.[ch]: Added PKCS7 management,
199 courtesy of Maas-Maarten Zeeman <maas@awanim.com>
200 * src/crypto/x509req.c: Added verify method.
201
2022002-06-17 Martin Sjögren <martin@strakt.com>
203
204 * rpm/, setup.cfg: Added improved RPM-building stuff, thanks to
205 Mihai Ibanescu <misa@redhat.com>
206
2072002-06-14 Martin Sjögren <martin@strakt.com>
208
209 * examples/proxy.py: Example code for using OpenSSL through a proxy
210 contributed by Mihai Ibanescu <misa@redhat.com>
211 * Updated installation instruction and added them to the TeX manual.
212
2132002-06-13 Martin Sjögren <martin@strakt.com>
214
215 * src/ssl/context.c: Changed global_verify_callback so that it uses
216 PyObject_IsTrue instead of requring ints.
217 * Added pymemcompat.h to make the memory management uniform and
218 backwards-compatible.
219 * src/util.h: Added conditional definition of PyModule_AddObject and
220 PyModule_AddIntConstant
221 * src/ssl/connection.c: Socket methods are no longer explicitly
222 wrapped. fileno() is the only method the transport layer object HAS
223 to support, but if you want to use connect, accept or sock_shutdown,
224 then the transport layer object has to supply connect, accept
225 and shutdown respectively.
226
2272002-06-12 Martin Sjögren <martin@strakt.com>
228
229 * Changed comments to docstrings that are visible in Python.
230 * src/ssl/connection.c: Added set_connect_state and set_accept_state
231 methods. Thanks to Mark Welch <mark@collab.net> for this.
232
2332002-06-11 Martin Sjögren <martin@strakt.com>
234
235 * src/ssl/connection.c: accept and connect now use SSL_set_accept_state
236 and SSL_set_connect_state respectively, instead of SSL_accept and
237 SSL_connect.
238 * src/ssl/connection.c: Added want_read and want_write methods.
239
2402002-06-05 Martin Sjögren <martin@strakt.com>
241
242 * src/ssl/connection.c: Added error messages for windows. The code is
243 copied from Python's socketmodule.c. Ick.
244 * src/ssl/connection.c: Changed the parameters to the SysCallError. It
245 always has a tuple (number, string) now, even though the number
246 might not always be useful.
247
2482002-04-05 Martin Sjögren <md9ms@mdstud.chalmers.se>
249
250 * Worked more on the Debian packaging, hopefully the packages
251 are getting into the main Debian archive soon.
252
2532002-01-10 Martin Sjögren <martin@strakt.com>
254
255 * Worked some more on the Debian packaging, it's turning out real
256 nice.
257 * Changed format on this file, I'm going to try to be a bit more
258 verbose about my changes, and this format makes it easier.
259
2602002-01-08 Martin Sjögren <martin@strakt.com>
261
262 * Version 0.4.1
263 * Added some example code
264 * Added the thread safe Connection object in the 'tsafe' submodule
265 * New Debian packaging
266
2672001-08-09 Martin Sjögren <martin@strakt.com>
268
269 * Version 0.4
270 * Added a compare function for X509Name structures.
271 * Moved the submodules to separate .so files, with tiny C APIs so they
272 can communicate
273 * Skeletal OpenSSL/__init__.py
274 * Removed the err submodule, use crypto.Error and SSL.Error instead
275
2762001-08-06 Martin Sjögren <martin@strakt.com>
277
278 * Version 0.3
279 * Added more types for dealing with certificates (X509Store, X509Req,
280 PKey)
281 * Functionality to load private keys, certificates and certificate
282 requests from memory buffers, and store them too
283 * X509 and X509Name objects can now be modified as well, very neat when
284 creating certificates ;)
285 * Added SSL_MODE_AUTO_RETRY to smooth things for blocking sockets
286 * Added a sock_shutdown() method to the Connection type
287 * I don't understand why, but I can't use Py_InitModule() to create
288 submodules in Python 2.0, the interpreter segfaults on the cleanup
289 process when I do. I added a conditional compile on the version
290 number, falling back to my own routine. It would of course be nice to
291 investigate what is happening, but I don't have the time to do so
292 * Do INCREF on the type objects before inserting them in the
293 dictionary, so they will never reach refcount 0 (they are, after all,
294 statically allocated)
295
2962001-07-30 Martin Sjögren <martin@strakt.com>
297
298 * Version 0.2
299 * Lots of tweaking and comments in the code
300 * Now uses distutils instead of the stupid Setup file
301 * Hacked doc/tools/mkhowto, html generation should now work
302
3032001-07-16 Martin Sjögren <martin@strakt.com>
304
305 * Initial release (0.1, don't expect much from this one :-)
306