blob: e28720de6d563921b9ac877e221dc47b0a62cec1 [file] [log] [blame]
Guillermo Gonzalez74a2c292011-08-29 16:16:58 -030012011-08-29 Guillermo Gonzalez <guillermo.gonzalez@canonical.com>
2
3 * OpenSSL/ssl/context.c: Add Context.set_mode method.
4 * OpenSSL/ssl/ssl.c: Add MODE_RELEASE_BUFFERS and OP_NO_COMPRESSION
5 constants.
6
Jean-Paul Calderoneeecb1982011-06-12 17:34:44 -040072011-06-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
8
Jean-Paul Calderone042b66d2011-06-12 21:56:13 -04009 * OpenSSL/crypto/pkey.c: Add the PKey.check method, mostly
10 implemented by Rick Dean, to verify the internal consistency of a
11 PKey instance.
12
132011-06-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
14
Jean-Paul Calderoneeecb1982011-06-12 17:34:44 -040015 * OpenSSL/crypto/crypto.c: Fix the sign and verify functions so
16 they handle data with embedded NULs. Fix by David Brodsky
17 <lp:~lihalla>.
18
Jean-Paul Calderoneee6532d2011-05-20 20:10:39 -0400192011-05-20 Jean-Paul Calderone <exarkun@twistedmatrix.com>
20
21 * OpenSSL/ssl/connection.c, OpenSSL/test/test_ssl.py: Add a new
22 method to the Connection type, get_peer_cert_chain, for retrieving
23 the peer's certificate chain.
24
Jean-Paul Calderone9c771672011-05-19 17:54:07 -0400252011-05-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
26
27 * OpenSSL/crypto/x509.c, OpenSSL/test/test_crypto.py: Add a new
28 method to the X509 type, get_signature_algorithm, for inspecting
29 the signature algorithm field of the certificate. Based on a
30 patch from <lp:~okuda>.
31
Jean-Paul Calderone9eff5692011-05-10 20:24:34 -0400322011-05-10 Jean-Paul Calderone <exarkun@twistedmatrix.com>
33
34 * OpenSSL/crypto/crypto.h: Work around a Windows/OpenSSL 1.0 issue
35 explicitly including a Windows header before any OpenSSL headers.
36
37 * OpenSSL/crypto/pkcs12.c: Work around an OpenSSL 1.0 issue by
38 explicitly flushing errors known to be uninteresting after calling
39 PKCS12_parse.
40
41 * OpenSSL/ssl/context.c: Remove SSLv2 support if the underlying
42 OpenSSL library does not provide it.
43
44 * OpenSSL/test/test_crypto.py: Support an OpenSSL 1.0 change from
45 MD5 to SHA1 by allowing either hash algorithm's result as the
46 return value of X509.subject_name_hash.
47
48 * OpenSSL/test/test_ssl.py: Support an OpenSSL 1.0 change from MD5
49 to SHA1 by constructing certificate files named using both hash
50 algorithms' results when testing Context.load_verify_locations.
51
52 * Support OpenSSL 1.0.0a.
53
542011-04-15 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone2309cd62011-04-15 12:17:53 -040055
56 * OpenSSL/ssl/ssl.c: Add OPENSSL_VERSION_NUMBER, SSLeay_version
57 and related constants for retrieving version information about the
58 underlying OpenSSL library.
59
Jean-Paul Calderonefc572cf2011-04-07 15:48:16 -0400602011-04-07 Jean-Paul Calderone <exarkun@twistedmatrix.com>
61
62 * Release 0.12
63
Jean-Paul Calderonec2d2bdb2011-04-06 22:19:52 -0400642011-04-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
65
66 * OpenSSL/crypto/x509.c: Add get_extension_count and get_extension
67 to the X509 type, allowing read access to certificate extensions.
68
69 * OpenSSL/crypto/x509ext.c: Add get_short_name and get_data to the
70 X509Extension type, allowing read access to the contents of an
71 extension.
72
Jean-Paul Calderonef65fe482011-03-21 19:16:40 -0400732011-03-21 Olivier Hervieu <lp:~ohe>
74
75 * OpenSSL/ssl/ssl.c: Expose a number of symbolic constants for
76 values passed to the connection "info" callback.
77
Jean-Paul Calderonef6a4a7c2011-01-22 10:04:48 -0500782011-01-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
79
80 * OpenSSL/ssl/connection.py: Add support for new-style
81 buffers (primarily memoryviews) to Connection.send and
82 Connection.sendall.
83
Jean-Paul Calderone8e1716f2010-11-01 17:43:15 -0400842010-11-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone7cb3f6d2010-10-31 10:36:23 -040085
86 * Release 0.11
87
Jean-Paul Calderoned16a3642010-10-07 22:19:58 -0400882010-10-07 Jean-Paul Calderone <exarkun@twistedmatrix.com>
89
90 * Initial support for Python 3.x throughout the codebase.
91
Jean-Paul Calderone84fd3742010-09-14 18:05:45 -0400922010-09-14 Jean-Paul Calderone <exarkun@twistedmatrix.com>
93
94 * OpenSSL/crypto/netscape_spki.c: Fix an off-by-one mistake in the
95 error handling for NetscapeSPKI.verify. Add additional error
96 checking to NetscapeSPKI.sign to handle the case where there is no
97 private key.
98
99 * OpenSSL/crypto/x509.c: Fix an overflow bug in the subject_name_hash
100 method of the X509 type which would cause it to return negative
101 values on 32 bit systems.
102
103 * OpenSSL/crypto/x509req.c: Fix an off-by-one mistake in the error
104 handling for X509Req.verify.
105
106 * OpenSSL/ssl/context.c: Fix the error handling in the load_tmp_dh
107 method of the Context type which would cause it to always raise
108 MemoryError, regardless of the actual error (such as a bad file
109 name).
110
111 * OpenSSL/test/: Numerous unit tests added, both for above fixes
112 and for other previously untested code paths.
113
Jean-Paul Calderone6d78fed2010-07-27 21:47:22 -04001142010-07-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
115
116 * Re-arrange the repository so that the package can be built and
117 used in-place without requiring installation.
118
James Yonan7c2e5d32010-02-27 05:45:50 -07001192010-02-27 James Yonan <james@openvpn.net>
120
121 * src/crypto/crypto.c: Added crypto.sign and crypto.verify methods
122 that wrap EVP_Sign and EVP_Verify function families, using code
123 derived from Dave Cridland's PyOpenSSL branch.
124
125 * test/test_crypto.py: Added unit tests for crypto.sign and
126 crypto.verify.
127
Jean-Paul Calderone40b32a22010-01-27 16:56:44 -05001282010-01-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
129
130 * src/ssl/connection.c, src/util.h: Apply patch from Sandro Tosi to
131 fix misspellings of "compatibility".
132
Jean-Paul Calderone5cc61972009-11-13 09:16:32 -05001332009-11-13 Jean-Paul Calderone <exarkun@twistedmatrix.com>
134
135 * Release 0.10
136
Jean-Paul Calderone76751912009-11-12 07:51:04 -05001372009-11-07 Žiga Seilnacht, Jean-Paul Calderone <exarkun@twistedmatrix.com>
138
139 * src/ssl/connection.c, src/ssl/context.c: Add set_client_ca_list,
140 add_client_ca, and get_client_ca_list to Context for manipulating
141 the list of certificate authority names which are sent by servers
142 with the certificate request message.
143 * src/util.h: Add ssize-related defines if the version of Python
144 being used does not have them.
145 * setup.py: Significant changes to the way Windows builds are done,
146 particularly the way OpenSSL headers and libraries are found (with
147 the new --with-openssl argument to build_ext).
148
Jean-Paul Calderone2953db82009-08-27 13:20:38 -04001492009-08-27 Rick Dean <rick@fdd.com>, Jean-Paul Calderone <exarkun@twistedmatrix.com>
150
151 * src/crypto/pkcs12.c: Add setters to the PKCS12 type for the
152 certificate, private key, ca certificate list, and friendly
153 name, and add a getter for the friendly name. Also add a method
154 for exporting a PKCS12 object as a string.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400155 * test/test_crypto.py: Add lots of additional tests for the PKCS12
156 type.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400157 * doc/pyOpenSSL.tex: Documentation for the new PKCS12 methods.
158
1592009-07-17 Rick Dean <rick@fdd.com>, Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone9ac425c2009-07-17 16:06:12 -0400160
161 * src/crypto/x509ext.c: Add subject and issuer parameters to
162 X509Extension, allowing creation of extensions which require that
163 information. Fixes LP#322813.
164
Jean-Paul Calderone8b327992009-07-16 18:52:14 -04001652009-07-16 Jean-Paul Calderone <exarkun@twistedmatrix.com>
166
167 * test/util.py: Changed the base TestCase's tearDown to assert that
168 no errors were left in the OpenSSL error queue by the test.
169 * src/crypto/crypto.c: Add a private helper in support of the
170 TestCase.tearDown change.
171 * src/crypto/x509name.c: Changed X509Name's getattr implementation
172 to clean up the error queue. Fixes LP#314814.
173 * test/util.c: Changed flush_error_queue to avoid a reference
174 counting bug caused by macro expansion.
175
Jean-Paul Calderoneb3b94e02009-07-16 14:07:28 -04001762009-07-16 Rick Dean <rick@fdd.com>
177
178 * src/rand.c: Added OpenSSL.rand.bytes to get random bytes directly.
179 * src/util.c: Added generic exceptions_from_error_queue to replace
180 the various other implementations of this function. Also updated
181 the rest of the codebase to use this version instead.
182
Jean-Paul Calderone0b88b6a2009-07-05 12:44:41 -04001832009-07-05 Jean-Paul Calderone <exarkun@twistedmatrix.com>
184
Jean-Paul Calderone18808652009-07-05 12:54:05 -0400185 * test/util.py, test/test_ssl.py, test/test_crypto.py: Fold the
186 Python 2.3 compatibility TestCase mixin into the TestCase defined
187 in util.py.
188
1892009-07-05 Jean-Paul Calderone <exarkun@twistedmatrix.com>
190
Jean-Paul Calderone0b88b6a2009-07-05 12:44:41 -0400191 * test/util.py, test/test_ssl.py, test/test_crypto.py: Stop trying
192 to use Twisted's TestCase even when it's available. Instead,
193 always use the stdlib TestCase with a few enhancements.
194
Jean-Paul Calderonefdc5a0a2009-07-04 15:48:42 -04001952009-07-04 Jean-Paul Calderone <exarkun@twistedmatrix.com>
196
197 * Changed most extension types so that they can be instantiated
198 using the type object rather than a factory function. The old
199 factory functions are now aliases for the type objects.
200 Fixes LP#312786.
201
Jean-Paul Calderonea96bfed2009-05-27 08:47:34 -04002022009-05-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
203
Jean-Paul Calderone54bcc832009-05-27 14:06:48 -0400204 * Changed all docstrings in extension modules to be friendlier
205 towards Python programmers. Fixes LP#312787.
206
2072009-05-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
208
Jean-Paul Calderonea96bfed2009-05-27 08:47:34 -0400209 * src/crypto/x509ext.c: Correctly deallocate the new Extension
210 instance when there is an error initializing it and it is not
211 going to be returned. Resolves LP#368043.
212
Jean-Paul Calderoned683f2d2009-05-11 10:47:42 -04002132009-05-11 Jean-Paul Calderone <exarkun@twistedmatrix.com>
214
215 * test/test_crypto.py: Use binary mode for the pipe to talk to the
216 external openssl binary. The data being transported over this
217 pipe is indeed binary, so previously it would often be truncated
218 or otherwise mangled.
219
220 * src/ssl/connection.h, src/ssl/connection.c, test/test_ssl.py:
221 Extend the Connection class with support for in-memory BIOs. This
222 allows SSL to be run without a real socket, useful for
223 implementing EAP-TLS or using SSL with Windows IO completion
Jean-Paul Calderoneb0921592009-05-11 10:48:41 -0400224 ports, for example. Based heavily on contributions from Rick
225 Dean.
Jean-Paul Calderoned683f2d2009-05-11 10:47:42 -0400226
Jean-Paul Calderone71ff3682009-04-25 08:30:11 -04002272009-04-25 Jean-Paul Calderone <exarkun@twistedmatrix.com>
228
229 * Release 0.9
230
Jean-Paul Calderoneb8a70732009-04-01 14:49:13 -04002312009-04-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderoneec48cd52009-04-01 19:01:41 -0400232 Samuele Pedroni <pedronis@openend.se>
233
234 * src/util.h: Delete the TLS key before trying to set a new value
235 for it in case the current thread identifier is a recycled one (if
236 it is recycled, the key won't be set because there is already a
237 value from the previous thread to have this identifier and to use
238 the pyOpenSSL API).
239
2402009-04-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderoneb8a70732009-04-01 14:49:13 -0400241
242 * src/crypto/crypto.c: Add FILETYPE_TEXT for dumping keys and
243 certificates and certificate signature requests to a text format.
244
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -05002452008-12-31 Jean-Paul Calderone <exarkun@twistedmatrix.com>
246
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -0500247 * src/crypto/x509ext.c, test/test_crypto.py: Add the get_short_name
248 method to X509Extension based on patch from Alex Stapleton.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400249
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -05002502008-12-31 Jean-Paul Calderone <exarkun@twistedmatrix.com>
251
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500252 * src/crypto/x509ext.c, test/test_crypto.py: Fix X509Extension so
253 that it is possible to instantiate extensions which use s2i or r2i
254 instead of v2i (an extremely obscure extension implementation
255 detail).
256
Jean-Paul Calderone24e2b0b2008-12-30 15:12:11 -05002572008-12-30 Jean-Paul Calderone <exarkun@twistedmatrix.com>
258
259 * MANIFEST.in, src/crypto/crypto.c, src/crypto/x509.c,
260 src/crypto/x509name.c, src/rand/rand.c, src/ssl/context.c: Changes
261 which eliminate compiler warnings but should not change any
262 behavior.
263
Jean-Paul Calderone8dd19b82008-12-28 20:41:16 -05002642008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
265
Jean-Paul Calderone327d8f92008-12-28 21:55:56 -0500266 * test/test_ssl.py, src/ssl/ssl.c: Expose DTLS-related constants,
267 OP_NO_QUERY_MTU, OP_COOKIE_EXCHANGE, and OP_NO_TICKET.
268
2692008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
270
Jean-Paul Calderoneaa9c7972008-09-07 21:27:49 -0400271 * src/ssl/context.c: Add a capath parameter to
272 Context.load_verify_locations to allow Python code to specify
273 either or both arguments to the underlying
274 SSL_CTX_load_verify_locations API.
275 * src/ssl/context.c: Add Context.set_default_verify_paths, a wrapper
276 around SSL_CTX_set_default_verify_paths.
277
Jean-Paul Calderone5b000d72008-12-28 21:09:53 -05002782008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
279
Jean-Paul Calderone8dd19b82008-12-28 20:41:16 -0500280 * test/test_crypto.py, src/crypto/x509req.c: Added get_version and
281 set_version_methods to X509ReqType based on patch from Wouter van
282 Bommel. Resolves LP#274418.
283
Jean-Paul Calderonef7f0fb42008-10-19 11:55:13 -04002842008-09-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
285
286 * Release 0.8
287
Jean-Paul Calderone002bf462008-10-19 11:35:40 -04002882008-10-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
289
290 * tsafe.py: Revert the deprecation of the thread-safe Connection
291 wrapper. The Connection class should not segfault if used from
292 multiple threads now, but it generally cannot be relied on to
293 produce correct results if used without the thread-safe wrapper.
Jean-Paul Calderone1eeb29e2008-10-19 11:50:53 -0400294 * doc/pyOpenSSL.tex: Correct the documentation for the set_passwd_cb
295 callback parameter so that it accurately describes the required
296 signature.
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400297
Jean-Paul Calderonea319ca92008-09-22 08:45:40 -04002982008-09-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
299
Jean-Paul Calderoneb5fdbbf2008-09-22 09:04:09 -0400300 * Release 0.8a1
301
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -04003022008-09-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
303
304 * src/ssl/ssl.h, src/ssl/ssl.c: Add a thread-local storage key
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400305 which will be used to store and retrieve PyThreadState pointers
306 whenever it is necessary to release or re-acquire the GIL.
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -0400307
308 * src/ssl/context.c: Change global_verify_callback so that it
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400309 unconditionally manipulates the Python threadstate, rather than
310 checking the tstate field which is now always NULL.
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -0400311
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -04003122008-04-26 Jean-Paul Calderone <exarkun@twistedmatrix.com>
313
Jean-Paul Calderone5ef86512008-04-26 19:06:28 -0400314 * src/ssl/context.c: Change global_passphrase_callback and
315 global_info_callback so that they acquire the GIL before
316 invoking any CPython APIs and do not release it until after they
317 are finished invoking all of them (based heavily on on patch
318 from Dan Williams).
Jean-Paul Calderoneaea5d902008-04-26 19:53:39 -0400319 * src/ssl/crypto.c: Initialize OpenSSL thread support so that it
320 is valid to use OpenSSL APIs from more than one thread (based on
321 patch from Dan Williams).
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400322 * test/test_crypto.py: Add tests for load_privatekey and
323 dump_privatekey when a passphrase or a passphrase callback is
324 supplied.
Jean-Paul Calderone5ef86512008-04-26 19:06:28 -0400325 * test/test_ssl.py: Add tests for Context.set_passwd_cb and
326 Context.set_info_callback.
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400327
Jean-Paul Calderonee53ccf72008-04-11 11:40:39 -04003282008-04-11 Jean-Paul Calderone <exarkun@twistedmatrix.com>
329
330 * Release 0.7
331
Jean-Paul Calderonec54cc182008-03-26 21:11:07 -04003322008-03-26 Jean-Paul Calderone <exarkun@twistedmatrix.com>
333
334 * src/crypto/x509name.c: Add X509Name.get_components
335
Jean-Paul Calderone9ab16c02008-03-25 15:22:47 -04003362008-03-25 Jean-Paul Calderone <exarkun@twistedmatrix.com>
337
338 * src/crypto/x509name.c: Add hash and der methods to X509Name.
Jean-Paul Calderonec8215432008-03-25 15:34:21 -0400339 * src/crypto/x509.c: Fix a bug in X509.get_notBefore and
340 X509.get_notAfter preventing UTCTIME format timestamps from
341 working.
Jean-Paul Calderone9ab16c02008-03-25 15:22:47 -0400342
Jean-Paul Calderone3de9f622008-03-12 14:12:19 -04003432008-03-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
344
345 * Fix coding problems in examples/. Remove keys and certificates
346 and add a note about how to generate new ones.
347
Jean-Paul Calderone525ef802008-03-09 20:39:42 -04003482008-03-09 Jean-Paul Calderone <exarkun@twistedmatrix.com>
349
350 * src/crypto/x509.c: Add getters and setters for the notBefore and
351 notAfter attributes of X509s.
Jean-Paul Calderoneac0d95f2008-03-10 00:00:42 -0400352 * src/crypto/pkey.h, src/crypto/pkey.c, src/crypto/x509req.c,
353 src/crypto/x509.c: Track the initialized and public/private state
354 of EVP_PKEY structures underlying the crypto_PKeyObj type and
355 reject X509Req signature operations on keys not suitable for the
356 task.
Jean-Paul Calderone525ef802008-03-09 20:39:42 -0400357
Jean-Paul Calderoneda92ccc2008-03-06 23:48:12 -05003582008-03-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
359
360 * src/crypto/x509name.c: Fix tp_compare so it only returns -1, 0, or
361 1. This eliminates a RuntimeWarning emitted by Python.
362 * src/crypto/x509req.c: Fix reference counting for X509Name returned
363 by X509Req.get_subject. This removes a segfault when the subject
364 name outlives the request object.
365 * src/crypto/x509.c: Change get_serial_number and set_serial_number
366 to accept Python longs.
367 * doc/pyOpenSSL.tex: A number of minor corrections.
368
Jean-Paul Calderone7df40db2008-03-03 15:12:42 -05003692008-03-03 Jean-Paul Calderone <exarkun@twistedmatrix.com>
370
371 * src/crypto/crypto.c: Expose X509_verify_cert_error_string. (patch
372 from Victor Stinner)
373
Jean-Paul Calderone12ea9a02008-02-22 12:24:39 -05003742008-02-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
375
376 * src/ssl/connection.c src/ssl/context.c src/ssl/ssl.c: Fix
377 compilation on Windows. (patch from Michael Schneider)
378
Jean-Paul Calderone72b8f0f2008-02-21 23:57:40 -05003792008-02-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
380
381 * src/ssl/connection.c: Expose SSL_get_shutdown and
382 SSL_set_shutdown. (patch from James Knight)
383 * src/ssl/ssl.c: Expose SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN.
384 (patch from James Knight)
385
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -05003862008-02-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
387
388 * src/ssl/context.c: Expose SSL_CTX_add_extra_chain_cert.
389 * src/crypto/x509name.c: Fix memory leaks in __getattr__ and
390 __setattr_ implementations.
Jean-Paul Calderone19555b92008-02-19 22:29:57 -0500391 * src/crypto/x509.c: Fix memory leak in X509.get_pubkey().
392 * leakcheck/: An attempt at a systematic approach to leak
393 elimination.
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -0500394
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05003952004-08-13 Martin Sjögren <msjogren@gmail.com>
396
397 * Released version 0.6.
398
3992004-08-11 Martin Sjögren <msjogren@gmail.com>
400
401 * doc/pyOpenSSL.tex: Updates to the docs.
402
4032004-08-10 Martin Sjögren <msjogren@gmail.com>
404
405 * src/crypto/x509.c: Add X509.add_extensions based on a patch
406 from Han S. Lee.
407 * src/ssl/ssl.c: Add more SSL_OP_ constants. Patch from Mihai
408 Ibanescu.
409
4102004-08-09 Martin Sjögren <msjogren@gmail.com>
411
412 * setup.py src/crypto/: Add support for Netscape SPKI extensions
413 based on a patch from Tollef Fog Heen.
414 * src/crypto/crypto.c: Add support for python passphrase callbacks
415 based on a patch from Robert Olson.
416
4172004-08-03 Martin Sjögren <msjogren@gmail.com>
418
419 * src/ssl/context.c: Applied patch from Frederic Peters to add
420 Context.use_certificate_chain_file.
421 * src/crypto/x509.c: Applid patch from Tollef Fog Heen to add
422 X509.subject_name_hash and X509.digest.
423
4242004-08-02 Martin Sjögren <msjogren@gmail.com>
425
426 * src/crypto/crypto.c src/ssl/ssl.c: Applied patch from Bastian
427 Kleineidam to fix full names of exceptions.
428
4292004-07-19 Martin Sjögren <msjogren@gmail.com>
430
431 * doc/pyOpenSSL.tex: Fix the errors regarding X509Name's field names.
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400432
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05004332004-07-18 Martin Sjögren <msjogren@gmail.com>
434
435 * examples/certgen.py: Fixed wrong attributes in doc string, thanks
436 Remy. (SFbug#913315)
437 * __init__.py, setup.py, version.py: Add __version__, as suggested by
438 Ronald Oussoren in SFbug#888729.
439 * examples/proxy.py: Fix typos, thanks Mihai Ibanescu. (SFpatch#895820)
440
4412003-01-09 Martin Sjögren <martin@strakt.com>
442
443 * Use cyclic GC protocol in SSL.Connection, SSL.Context, crypto.PKCS12
444 and crypto.X509Name.
445
4462002-12-02 Martin Sjögren <martin@strakt.com>
447
448 * tsafe.py: Add some missing methods.
449
4502002-10-06 Martin Sjögren <martin@strakt.com>
451
452 * __init__.py: Import tsafe too!
453
4542002-10-05 Martin Sjögren <martin@strakt.com>
455
456 * src/crypto/x509name.c: Use unicode strings instead of ordinary
457 strings in getattr/setattr. Note that plain ascii strings should
458 still work.
459
4602002-09-17 Martin Sjögren <martin@strakt.com>
461
462 * Released version 0.5.1.
463
4642002-09-09 Martin Sjögren <martin@strakt.com>
465
466 * setup.cfg: Fixed build requirements for rpms.
467
4682002-09-07 Martin Sjögren <martin@strakt.com>
469
470 * src/ssl/connection.c: Fix sendall() method. It segfaulted because
471 it was too generous about giving away the GIL.
472 * Added SecureXMLRPCServer example, contributed by Michal Wallace.
473
4742002-09-06 Martin Sjögren <martin@strakt.com>
475
476 * setup.cfg: Updated the build requirements.
477 * src/ssl/connection.c: Fix includes for AIX.
478
4792002-09-04 Anders Hammarquist <iko@strakt.com>
480
481 * Added type checks in all the other places where we expect
482 specific types of objects passed.
483
4842002-09-04 Martin Sjögren <martin@strakt.com>
485
486 * src/crypto/crypto.c: Added an explicit type check in the dump_*
487 functions, so that they won't die when e.g. None is passed in.
488
4892002-08-25 Martin Sjögren <martin@strakt.com>
490
491 * doc/pyOpenSSL.tex: Docs for PKCS12.
492
4932002-08-24 Martin Sjögren <martin@strakt.com>
494
495 * src/crypto: Added basic PKCS12 support, thanks to Mark Welch
496 <mark@collab.net>
497
4982002-08-16 Martin Sjögren <martin@strakt.com>
499
500 * D'oh! Fixes for python 1.5 and python 2.1.
501
5022002-08-15 Martin Sjögren <martin@strakt.com>
503
504 * Version 0.5. Yay!
505
5062002-07-25 Martin Sjögren <martin@strakt.com>
507
508 * src/ssl/context.c: Added set_options method.
509 * src/ssl/ssl.c: Added constants for Context.set_options method.
510
5112002-07-23 Martin Sjögren <martin@strakt.com>
512
513 * Updated docs
514 * src/ssl/connection.c: Changed the get_cipher_list method to actually
515 return a list! WARNING: This change makes the API incompatible with
516 earlier versions!
517
5182002-07-15 Martin Sjögren <martin@strakt.com>
519
520 * src/ssl/connection.[ch]: Removed the fileno method, it uses the
521 transport object's fileno instead.
522
5232002-07-09 Martin Sjögren <martin@strakt.com>
524
525 * src/crypto/x509.c src/crypto/x509name.c: Fixed segfault bug where
526 you used an X509Name after its X509 had been destroyed.
527 * src/crypto/crypto.[ch] src/crypto/x509req.c src/crypto/x509ext.[ch]:
528 Added X509 Extension support. Thanks to maas-Maarten Zeeman
529 <maas@awanim.com>
530 * src/crypto/pkey.c: Added bits() and type() methods.
531
5322002-07-08 Martin Sjögren <martin@strakt.com>
533
534 * src/ssl/connection.c: Moved the contents of setup_ssl into the
535 constructor, thereby fixing some segfault bugs :)
536 * src/ssl/connection.c: Added connect_ex and sendall methods.
537 * src/crypto/x509name.c: Cleaned up comparisons and NID lookup.
538 Thank you Maas-Maarten Zeeman <maas@awanim.com>
539 * src/rand/rand.c: Fix RAND_screen import.
540 * src/crypto/crypto.c src/crypto/pkcs7.[ch]: Added PKCS7 management,
541 courtesy of Maas-Maarten Zeeman <maas@awanim.com>
542 * src/crypto/x509req.c: Added verify method.
543
5442002-06-17 Martin Sjögren <martin@strakt.com>
545
546 * rpm/, setup.cfg: Added improved RPM-building stuff, thanks to
547 Mihai Ibanescu <misa@redhat.com>
548
5492002-06-14 Martin Sjögren <martin@strakt.com>
550
551 * examples/proxy.py: Example code for using OpenSSL through a proxy
552 contributed by Mihai Ibanescu <misa@redhat.com>
553 * Updated installation instruction and added them to the TeX manual.
554
5552002-06-13 Martin Sjögren <martin@strakt.com>
556
557 * src/ssl/context.c: Changed global_verify_callback so that it uses
558 PyObject_IsTrue instead of requring ints.
559 * Added pymemcompat.h to make the memory management uniform and
560 backwards-compatible.
561 * src/util.h: Added conditional definition of PyModule_AddObject and
562 PyModule_AddIntConstant
563 * src/ssl/connection.c: Socket methods are no longer explicitly
564 wrapped. fileno() is the only method the transport layer object HAS
565 to support, but if you want to use connect, accept or sock_shutdown,
566 then the transport layer object has to supply connect, accept
567 and shutdown respectively.
568
5692002-06-12 Martin Sjögren <martin@strakt.com>
570
571 * Changed comments to docstrings that are visible in Python.
572 * src/ssl/connection.c: Added set_connect_state and set_accept_state
573 methods. Thanks to Mark Welch <mark@collab.net> for this.
574
5752002-06-11 Martin Sjögren <martin@strakt.com>
576
577 * src/ssl/connection.c: accept and connect now use SSL_set_accept_state
578 and SSL_set_connect_state respectively, instead of SSL_accept and
579 SSL_connect.
580 * src/ssl/connection.c: Added want_read and want_write methods.
581
5822002-06-05 Martin Sjögren <martin@strakt.com>
583
584 * src/ssl/connection.c: Added error messages for windows. The code is
585 copied from Python's socketmodule.c. Ick.
586 * src/ssl/connection.c: Changed the parameters to the SysCallError. It
587 always has a tuple (number, string) now, even though the number
588 might not always be useful.
589
5902002-04-05 Martin Sjögren <md9ms@mdstud.chalmers.se>
591
592 * Worked more on the Debian packaging, hopefully the packages
593 are getting into the main Debian archive soon.
594
5952002-01-10 Martin Sjögren <martin@strakt.com>
596
597 * Worked some more on the Debian packaging, it's turning out real
598 nice.
599 * Changed format on this file, I'm going to try to be a bit more
600 verbose about my changes, and this format makes it easier.
601
6022002-01-08 Martin Sjögren <martin@strakt.com>
603
604 * Version 0.4.1
605 * Added some example code
606 * Added the thread safe Connection object in the 'tsafe' submodule
607 * New Debian packaging
608
6092001-08-09 Martin Sjögren <martin@strakt.com>
610
611 * Version 0.4
612 * Added a compare function for X509Name structures.
613 * Moved the submodules to separate .so files, with tiny C APIs so they
614 can communicate
615 * Skeletal OpenSSL/__init__.py
616 * Removed the err submodule, use crypto.Error and SSL.Error instead
617
6182001-08-06 Martin Sjögren <martin@strakt.com>
619
620 * Version 0.3
621 * Added more types for dealing with certificates (X509Store, X509Req,
622 PKey)
623 * Functionality to load private keys, certificates and certificate
624 requests from memory buffers, and store them too
625 * X509 and X509Name objects can now be modified as well, very neat when
626 creating certificates ;)
627 * Added SSL_MODE_AUTO_RETRY to smooth things for blocking sockets
628 * Added a sock_shutdown() method to the Connection type
629 * I don't understand why, but I can't use Py_InitModule() to create
630 submodules in Python 2.0, the interpreter segfaults on the cleanup
631 process when I do. I added a conditional compile on the version
632 number, falling back to my own routine. It would of course be nice to
633 investigate what is happening, but I don't have the time to do so
634 * Do INCREF on the type objects before inserting them in the
635 dictionary, so they will never reach refcount 0 (they are, after all,
636 statically allocated)
637
6382001-07-30 Martin Sjögren <martin@strakt.com>
639
640 * Version 0.2
641 * Lots of tweaking and comments in the code
642 * Now uses distutils instead of the stupid Setup file
643 * Hacked doc/tools/mkhowto, html generation should now work
644
6452001-07-16 Martin Sjögren <martin@strakt.com>
646
647 * Initial release (0.1, don't expect much from this one :-)
648