blob: d16f254100eec244e99a4a0c764aab4e3d8b777c [file] [log] [blame]
Jean-Paul Calderone9eff5692011-05-10 20:24:34 -040012011-05-10 Jean-Paul Calderone <exarkun@twistedmatrix.com>
2
3 * OpenSSL/crypto/crypto.h: Work around a Windows/OpenSSL 1.0 issue
4 explicitly including a Windows header before any OpenSSL headers.
5
6 * OpenSSL/crypto/pkcs12.c: Work around an OpenSSL 1.0 issue by
7 explicitly flushing errors known to be uninteresting after calling
8 PKCS12_parse.
9
10 * OpenSSL/ssl/context.c: Remove SSLv2 support if the underlying
11 OpenSSL library does not provide it.
12
13 * OpenSSL/test/test_crypto.py: Support an OpenSSL 1.0 change from
14 MD5 to SHA1 by allowing either hash algorithm's result as the
15 return value of X509.subject_name_hash.
16
17 * OpenSSL/test/test_ssl.py: Support an OpenSSL 1.0 change from MD5
18 to SHA1 by constructing certificate files named using both hash
19 algorithms' results when testing Context.load_verify_locations.
20
21 * Support OpenSSL 1.0.0a.
22
232011-04-15 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone2309cd62011-04-15 12:17:53 -040024
25 * OpenSSL/ssl/ssl.c: Add OPENSSL_VERSION_NUMBER, SSLeay_version
26 and related constants for retrieving version information about the
27 underlying OpenSSL library.
28
Jean-Paul Calderonefc572cf2011-04-07 15:48:16 -0400292011-04-07 Jean-Paul Calderone <exarkun@twistedmatrix.com>
30
31 * Release 0.12
32
Jean-Paul Calderonec2d2bdb2011-04-06 22:19:52 -0400332011-04-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
34
35 * OpenSSL/crypto/x509.c: Add get_extension_count and get_extension
36 to the X509 type, allowing read access to certificate extensions.
37
38 * OpenSSL/crypto/x509ext.c: Add get_short_name and get_data to the
39 X509Extension type, allowing read access to the contents of an
40 extension.
41
Jean-Paul Calderonef65fe482011-03-21 19:16:40 -0400422011-03-21 Olivier Hervieu <lp:~ohe>
43
44 * OpenSSL/ssl/ssl.c: Expose a number of symbolic constants for
45 values passed to the connection "info" callback.
46
Jean-Paul Calderonef6a4a7c2011-01-22 10:04:48 -0500472011-01-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
48
49 * OpenSSL/ssl/connection.py: Add support for new-style
50 buffers (primarily memoryviews) to Connection.send and
51 Connection.sendall.
52
Jean-Paul Calderone8e1716f2010-11-01 17:43:15 -0400532010-11-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone7cb3f6d2010-10-31 10:36:23 -040054
55 * Release 0.11
56
Jean-Paul Calderoned16a3642010-10-07 22:19:58 -0400572010-10-07 Jean-Paul Calderone <exarkun@twistedmatrix.com>
58
59 * Initial support for Python 3.x throughout the codebase.
60
Jean-Paul Calderone84fd3742010-09-14 18:05:45 -0400612010-09-14 Jean-Paul Calderone <exarkun@twistedmatrix.com>
62
63 * OpenSSL/crypto/netscape_spki.c: Fix an off-by-one mistake in the
64 error handling for NetscapeSPKI.verify. Add additional error
65 checking to NetscapeSPKI.sign to handle the case where there is no
66 private key.
67
68 * OpenSSL/crypto/x509.c: Fix an overflow bug in the subject_name_hash
69 method of the X509 type which would cause it to return negative
70 values on 32 bit systems.
71
72 * OpenSSL/crypto/x509req.c: Fix an off-by-one mistake in the error
73 handling for X509Req.verify.
74
75 * OpenSSL/ssl/context.c: Fix the error handling in the load_tmp_dh
76 method of the Context type which would cause it to always raise
77 MemoryError, regardless of the actual error (such as a bad file
78 name).
79
80 * OpenSSL/test/: Numerous unit tests added, both for above fixes
81 and for other previously untested code paths.
82
Jean-Paul Calderone6d78fed2010-07-27 21:47:22 -0400832010-07-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
84
85 * Re-arrange the repository so that the package can be built and
86 used in-place without requiring installation.
87
James Yonan7c2e5d32010-02-27 05:45:50 -0700882010-02-27 James Yonan <james@openvpn.net>
89
90 * src/crypto/crypto.c: Added crypto.sign and crypto.verify methods
91 that wrap EVP_Sign and EVP_Verify function families, using code
92 derived from Dave Cridland's PyOpenSSL branch.
93
94 * test/test_crypto.py: Added unit tests for crypto.sign and
95 crypto.verify.
96
Jean-Paul Calderone40b32a22010-01-27 16:56:44 -0500972010-01-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
98
99 * src/ssl/connection.c, src/util.h: Apply patch from Sandro Tosi to
100 fix misspellings of "compatibility".
101
Jean-Paul Calderone5cc61972009-11-13 09:16:32 -05001022009-11-13 Jean-Paul Calderone <exarkun@twistedmatrix.com>
103
104 * Release 0.10
105
Jean-Paul Calderone76751912009-11-12 07:51:04 -05001062009-11-07 Žiga Seilnacht, Jean-Paul Calderone <exarkun@twistedmatrix.com>
107
108 * src/ssl/connection.c, src/ssl/context.c: Add set_client_ca_list,
109 add_client_ca, and get_client_ca_list to Context for manipulating
110 the list of certificate authority names which are sent by servers
111 with the certificate request message.
112 * src/util.h: Add ssize-related defines if the version of Python
113 being used does not have them.
114 * setup.py: Significant changes to the way Windows builds are done,
115 particularly the way OpenSSL headers and libraries are found (with
116 the new --with-openssl argument to build_ext).
117
Jean-Paul Calderone2953db82009-08-27 13:20:38 -04001182009-08-27 Rick Dean <rick@fdd.com>, Jean-Paul Calderone <exarkun@twistedmatrix.com>
119
120 * src/crypto/pkcs12.c: Add setters to the PKCS12 type for the
121 certificate, private key, ca certificate list, and friendly
122 name, and add a getter for the friendly name. Also add a method
123 for exporting a PKCS12 object as a string.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400124 * test/test_crypto.py: Add lots of additional tests for the PKCS12
125 type.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400126 * doc/pyOpenSSL.tex: Documentation for the new PKCS12 methods.
127
1282009-07-17 Rick Dean <rick@fdd.com>, Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone9ac425c2009-07-17 16:06:12 -0400129
130 * src/crypto/x509ext.c: Add subject and issuer parameters to
131 X509Extension, allowing creation of extensions which require that
132 information. Fixes LP#322813.
133
Jean-Paul Calderone8b327992009-07-16 18:52:14 -04001342009-07-16 Jean-Paul Calderone <exarkun@twistedmatrix.com>
135
136 * test/util.py: Changed the base TestCase's tearDown to assert that
137 no errors were left in the OpenSSL error queue by the test.
138 * src/crypto/crypto.c: Add a private helper in support of the
139 TestCase.tearDown change.
140 * src/crypto/x509name.c: Changed X509Name's getattr implementation
141 to clean up the error queue. Fixes LP#314814.
142 * test/util.c: Changed flush_error_queue to avoid a reference
143 counting bug caused by macro expansion.
144
Jean-Paul Calderoneb3b94e02009-07-16 14:07:28 -04001452009-07-16 Rick Dean <rick@fdd.com>
146
147 * src/rand.c: Added OpenSSL.rand.bytes to get random bytes directly.
148 * src/util.c: Added generic exceptions_from_error_queue to replace
149 the various other implementations of this function. Also updated
150 the rest of the codebase to use this version instead.
151
Jean-Paul Calderone0b88b6a2009-07-05 12:44:41 -04001522009-07-05 Jean-Paul Calderone <exarkun@twistedmatrix.com>
153
Jean-Paul Calderone18808652009-07-05 12:54:05 -0400154 * test/util.py, test/test_ssl.py, test/test_crypto.py: Fold the
155 Python 2.3 compatibility TestCase mixin into the TestCase defined
156 in util.py.
157
1582009-07-05 Jean-Paul Calderone <exarkun@twistedmatrix.com>
159
Jean-Paul Calderone0b88b6a2009-07-05 12:44:41 -0400160 * test/util.py, test/test_ssl.py, test/test_crypto.py: Stop trying
161 to use Twisted's TestCase even when it's available. Instead,
162 always use the stdlib TestCase with a few enhancements.
163
Jean-Paul Calderonefdc5a0a2009-07-04 15:48:42 -04001642009-07-04 Jean-Paul Calderone <exarkun@twistedmatrix.com>
165
166 * Changed most extension types so that they can be instantiated
167 using the type object rather than a factory function. The old
168 factory functions are now aliases for the type objects.
169 Fixes LP#312786.
170
Jean-Paul Calderonea96bfed2009-05-27 08:47:34 -04001712009-05-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
172
Jean-Paul Calderone54bcc832009-05-27 14:06:48 -0400173 * Changed all docstrings in extension modules to be friendlier
174 towards Python programmers. Fixes LP#312787.
175
1762009-05-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
177
Jean-Paul Calderonea96bfed2009-05-27 08:47:34 -0400178 * src/crypto/x509ext.c: Correctly deallocate the new Extension
179 instance when there is an error initializing it and it is not
180 going to be returned. Resolves LP#368043.
181
Jean-Paul Calderoned683f2d2009-05-11 10:47:42 -04001822009-05-11 Jean-Paul Calderone <exarkun@twistedmatrix.com>
183
184 * test/test_crypto.py: Use binary mode for the pipe to talk to the
185 external openssl binary. The data being transported over this
186 pipe is indeed binary, so previously it would often be truncated
187 or otherwise mangled.
188
189 * src/ssl/connection.h, src/ssl/connection.c, test/test_ssl.py:
190 Extend the Connection class with support for in-memory BIOs. This
191 allows SSL to be run without a real socket, useful for
192 implementing EAP-TLS or using SSL with Windows IO completion
Jean-Paul Calderoneb0921592009-05-11 10:48:41 -0400193 ports, for example. Based heavily on contributions from Rick
194 Dean.
Jean-Paul Calderoned683f2d2009-05-11 10:47:42 -0400195
Jean-Paul Calderone71ff3682009-04-25 08:30:11 -04001962009-04-25 Jean-Paul Calderone <exarkun@twistedmatrix.com>
197
198 * Release 0.9
199
Jean-Paul Calderoneb8a70732009-04-01 14:49:13 -04002002009-04-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderoneec48cd52009-04-01 19:01:41 -0400201 Samuele Pedroni <pedronis@openend.se>
202
203 * src/util.h: Delete the TLS key before trying to set a new value
204 for it in case the current thread identifier is a recycled one (if
205 it is recycled, the key won't be set because there is already a
206 value from the previous thread to have this identifier and to use
207 the pyOpenSSL API).
208
2092009-04-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderoneb8a70732009-04-01 14:49:13 -0400210
211 * src/crypto/crypto.c: Add FILETYPE_TEXT for dumping keys and
212 certificates and certificate signature requests to a text format.
213
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -05002142008-12-31 Jean-Paul Calderone <exarkun@twistedmatrix.com>
215
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -0500216 * src/crypto/x509ext.c, test/test_crypto.py: Add the get_short_name
217 method to X509Extension based on patch from Alex Stapleton.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400218
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -05002192008-12-31 Jean-Paul Calderone <exarkun@twistedmatrix.com>
220
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500221 * src/crypto/x509ext.c, test/test_crypto.py: Fix X509Extension so
222 that it is possible to instantiate extensions which use s2i or r2i
223 instead of v2i (an extremely obscure extension implementation
224 detail).
225
Jean-Paul Calderone24e2b0b2008-12-30 15:12:11 -05002262008-12-30 Jean-Paul Calderone <exarkun@twistedmatrix.com>
227
228 * MANIFEST.in, src/crypto/crypto.c, src/crypto/x509.c,
229 src/crypto/x509name.c, src/rand/rand.c, src/ssl/context.c: Changes
230 which eliminate compiler warnings but should not change any
231 behavior.
232
Jean-Paul Calderone8dd19b82008-12-28 20:41:16 -05002332008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
234
Jean-Paul Calderone327d8f92008-12-28 21:55:56 -0500235 * test/test_ssl.py, src/ssl/ssl.c: Expose DTLS-related constants,
236 OP_NO_QUERY_MTU, OP_COOKIE_EXCHANGE, and OP_NO_TICKET.
237
2382008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
239
Jean-Paul Calderoneaa9c7972008-09-07 21:27:49 -0400240 * src/ssl/context.c: Add a capath parameter to
241 Context.load_verify_locations to allow Python code to specify
242 either or both arguments to the underlying
243 SSL_CTX_load_verify_locations API.
244 * src/ssl/context.c: Add Context.set_default_verify_paths, a wrapper
245 around SSL_CTX_set_default_verify_paths.
246
Jean-Paul Calderone5b000d72008-12-28 21:09:53 -05002472008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
248
Jean-Paul Calderone8dd19b82008-12-28 20:41:16 -0500249 * test/test_crypto.py, src/crypto/x509req.c: Added get_version and
250 set_version_methods to X509ReqType based on patch from Wouter van
251 Bommel. Resolves LP#274418.
252
Jean-Paul Calderonef7f0fb42008-10-19 11:55:13 -04002532008-09-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
254
255 * Release 0.8
256
Jean-Paul Calderone002bf462008-10-19 11:35:40 -04002572008-10-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
258
259 * tsafe.py: Revert the deprecation of the thread-safe Connection
260 wrapper. The Connection class should not segfault if used from
261 multiple threads now, but it generally cannot be relied on to
262 produce correct results if used without the thread-safe wrapper.
Jean-Paul Calderone1eeb29e2008-10-19 11:50:53 -0400263 * doc/pyOpenSSL.tex: Correct the documentation for the set_passwd_cb
264 callback parameter so that it accurately describes the required
265 signature.
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400266
Jean-Paul Calderonea319ca92008-09-22 08:45:40 -04002672008-09-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
268
Jean-Paul Calderoneb5fdbbf2008-09-22 09:04:09 -0400269 * Release 0.8a1
270
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -04002712008-09-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
272
273 * src/ssl/ssl.h, src/ssl/ssl.c: Add a thread-local storage key
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400274 which will be used to store and retrieve PyThreadState pointers
275 whenever it is necessary to release or re-acquire the GIL.
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -0400276
277 * src/ssl/context.c: Change global_verify_callback so that it
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400278 unconditionally manipulates the Python threadstate, rather than
279 checking the tstate field which is now always NULL.
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -0400280
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -04002812008-04-26 Jean-Paul Calderone <exarkun@twistedmatrix.com>
282
Jean-Paul Calderone5ef86512008-04-26 19:06:28 -0400283 * src/ssl/context.c: Change global_passphrase_callback and
284 global_info_callback so that they acquire the GIL before
285 invoking any CPython APIs and do not release it until after they
286 are finished invoking all of them (based heavily on on patch
287 from Dan Williams).
Jean-Paul Calderoneaea5d902008-04-26 19:53:39 -0400288 * src/ssl/crypto.c: Initialize OpenSSL thread support so that it
289 is valid to use OpenSSL APIs from more than one thread (based on
290 patch from Dan Williams).
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400291 * test/test_crypto.py: Add tests for load_privatekey and
292 dump_privatekey when a passphrase or a passphrase callback is
293 supplied.
Jean-Paul Calderone5ef86512008-04-26 19:06:28 -0400294 * test/test_ssl.py: Add tests for Context.set_passwd_cb and
295 Context.set_info_callback.
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400296
Jean-Paul Calderonee53ccf72008-04-11 11:40:39 -04002972008-04-11 Jean-Paul Calderone <exarkun@twistedmatrix.com>
298
299 * Release 0.7
300
Jean-Paul Calderonec54cc182008-03-26 21:11:07 -04003012008-03-26 Jean-Paul Calderone <exarkun@twistedmatrix.com>
302
303 * src/crypto/x509name.c: Add X509Name.get_components
304
Jean-Paul Calderone9ab16c02008-03-25 15:22:47 -04003052008-03-25 Jean-Paul Calderone <exarkun@twistedmatrix.com>
306
307 * src/crypto/x509name.c: Add hash and der methods to X509Name.
Jean-Paul Calderonec8215432008-03-25 15:34:21 -0400308 * src/crypto/x509.c: Fix a bug in X509.get_notBefore and
309 X509.get_notAfter preventing UTCTIME format timestamps from
310 working.
Jean-Paul Calderone9ab16c02008-03-25 15:22:47 -0400311
Jean-Paul Calderone3de9f622008-03-12 14:12:19 -04003122008-03-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
313
314 * Fix coding problems in examples/. Remove keys and certificates
315 and add a note about how to generate new ones.
316
Jean-Paul Calderone525ef802008-03-09 20:39:42 -04003172008-03-09 Jean-Paul Calderone <exarkun@twistedmatrix.com>
318
319 * src/crypto/x509.c: Add getters and setters for the notBefore and
320 notAfter attributes of X509s.
Jean-Paul Calderoneac0d95f2008-03-10 00:00:42 -0400321 * src/crypto/pkey.h, src/crypto/pkey.c, src/crypto/x509req.c,
322 src/crypto/x509.c: Track the initialized and public/private state
323 of EVP_PKEY structures underlying the crypto_PKeyObj type and
324 reject X509Req signature operations on keys not suitable for the
325 task.
Jean-Paul Calderone525ef802008-03-09 20:39:42 -0400326
Jean-Paul Calderoneda92ccc2008-03-06 23:48:12 -05003272008-03-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
328
329 * src/crypto/x509name.c: Fix tp_compare so it only returns -1, 0, or
330 1. This eliminates a RuntimeWarning emitted by Python.
331 * src/crypto/x509req.c: Fix reference counting for X509Name returned
332 by X509Req.get_subject. This removes a segfault when the subject
333 name outlives the request object.
334 * src/crypto/x509.c: Change get_serial_number and set_serial_number
335 to accept Python longs.
336 * doc/pyOpenSSL.tex: A number of minor corrections.
337
Jean-Paul Calderone7df40db2008-03-03 15:12:42 -05003382008-03-03 Jean-Paul Calderone <exarkun@twistedmatrix.com>
339
340 * src/crypto/crypto.c: Expose X509_verify_cert_error_string. (patch
341 from Victor Stinner)
342
Jean-Paul Calderone12ea9a02008-02-22 12:24:39 -05003432008-02-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
344
345 * src/ssl/connection.c src/ssl/context.c src/ssl/ssl.c: Fix
346 compilation on Windows. (patch from Michael Schneider)
347
Jean-Paul Calderone72b8f0f2008-02-21 23:57:40 -05003482008-02-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
349
350 * src/ssl/connection.c: Expose SSL_get_shutdown and
351 SSL_set_shutdown. (patch from James Knight)
352 * src/ssl/ssl.c: Expose SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN.
353 (patch from James Knight)
354
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -05003552008-02-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
356
357 * src/ssl/context.c: Expose SSL_CTX_add_extra_chain_cert.
358 * src/crypto/x509name.c: Fix memory leaks in __getattr__ and
359 __setattr_ implementations.
Jean-Paul Calderone19555b92008-02-19 22:29:57 -0500360 * src/crypto/x509.c: Fix memory leak in X509.get_pubkey().
361 * leakcheck/: An attempt at a systematic approach to leak
362 elimination.
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -0500363
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05003642004-08-13 Martin Sjögren <msjogren@gmail.com>
365
366 * Released version 0.6.
367
3682004-08-11 Martin Sjögren <msjogren@gmail.com>
369
370 * doc/pyOpenSSL.tex: Updates to the docs.
371
3722004-08-10 Martin Sjögren <msjogren@gmail.com>
373
374 * src/crypto/x509.c: Add X509.add_extensions based on a patch
375 from Han S. Lee.
376 * src/ssl/ssl.c: Add more SSL_OP_ constants. Patch from Mihai
377 Ibanescu.
378
3792004-08-09 Martin Sjögren <msjogren@gmail.com>
380
381 * setup.py src/crypto/: Add support for Netscape SPKI extensions
382 based on a patch from Tollef Fog Heen.
383 * src/crypto/crypto.c: Add support for python passphrase callbacks
384 based on a patch from Robert Olson.
385
3862004-08-03 Martin Sjögren <msjogren@gmail.com>
387
388 * src/ssl/context.c: Applied patch from Frederic Peters to add
389 Context.use_certificate_chain_file.
390 * src/crypto/x509.c: Applid patch from Tollef Fog Heen to add
391 X509.subject_name_hash and X509.digest.
392
3932004-08-02 Martin Sjögren <msjogren@gmail.com>
394
395 * src/crypto/crypto.c src/ssl/ssl.c: Applied patch from Bastian
396 Kleineidam to fix full names of exceptions.
397
3982004-07-19 Martin Sjögren <msjogren@gmail.com>
399
400 * doc/pyOpenSSL.tex: Fix the errors regarding X509Name's field names.
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400401
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05004022004-07-18 Martin Sjögren <msjogren@gmail.com>
403
404 * examples/certgen.py: Fixed wrong attributes in doc string, thanks
405 Remy. (SFbug#913315)
406 * __init__.py, setup.py, version.py: Add __version__, as suggested by
407 Ronald Oussoren in SFbug#888729.
408 * examples/proxy.py: Fix typos, thanks Mihai Ibanescu. (SFpatch#895820)
409
4102003-01-09 Martin Sjögren <martin@strakt.com>
411
412 * Use cyclic GC protocol in SSL.Connection, SSL.Context, crypto.PKCS12
413 and crypto.X509Name.
414
4152002-12-02 Martin Sjögren <martin@strakt.com>
416
417 * tsafe.py: Add some missing methods.
418
4192002-10-06 Martin Sjögren <martin@strakt.com>
420
421 * __init__.py: Import tsafe too!
422
4232002-10-05 Martin Sjögren <martin@strakt.com>
424
425 * src/crypto/x509name.c: Use unicode strings instead of ordinary
426 strings in getattr/setattr. Note that plain ascii strings should
427 still work.
428
4292002-09-17 Martin Sjögren <martin@strakt.com>
430
431 * Released version 0.5.1.
432
4332002-09-09 Martin Sjögren <martin@strakt.com>
434
435 * setup.cfg: Fixed build requirements for rpms.
436
4372002-09-07 Martin Sjögren <martin@strakt.com>
438
439 * src/ssl/connection.c: Fix sendall() method. It segfaulted because
440 it was too generous about giving away the GIL.
441 * Added SecureXMLRPCServer example, contributed by Michal Wallace.
442
4432002-09-06 Martin Sjögren <martin@strakt.com>
444
445 * setup.cfg: Updated the build requirements.
446 * src/ssl/connection.c: Fix includes for AIX.
447
4482002-09-04 Anders Hammarquist <iko@strakt.com>
449
450 * Added type checks in all the other places where we expect
451 specific types of objects passed.
452
4532002-09-04 Martin Sjögren <martin@strakt.com>
454
455 * src/crypto/crypto.c: Added an explicit type check in the dump_*
456 functions, so that they won't die when e.g. None is passed in.
457
4582002-08-25 Martin Sjögren <martin@strakt.com>
459
460 * doc/pyOpenSSL.tex: Docs for PKCS12.
461
4622002-08-24 Martin Sjögren <martin@strakt.com>
463
464 * src/crypto: Added basic PKCS12 support, thanks to Mark Welch
465 <mark@collab.net>
466
4672002-08-16 Martin Sjögren <martin@strakt.com>
468
469 * D'oh! Fixes for python 1.5 and python 2.1.
470
4712002-08-15 Martin Sjögren <martin@strakt.com>
472
473 * Version 0.5. Yay!
474
4752002-07-25 Martin Sjögren <martin@strakt.com>
476
477 * src/ssl/context.c: Added set_options method.
478 * src/ssl/ssl.c: Added constants for Context.set_options method.
479
4802002-07-23 Martin Sjögren <martin@strakt.com>
481
482 * Updated docs
483 * src/ssl/connection.c: Changed the get_cipher_list method to actually
484 return a list! WARNING: This change makes the API incompatible with
485 earlier versions!
486
4872002-07-15 Martin Sjögren <martin@strakt.com>
488
489 * src/ssl/connection.[ch]: Removed the fileno method, it uses the
490 transport object's fileno instead.
491
4922002-07-09 Martin Sjögren <martin@strakt.com>
493
494 * src/crypto/x509.c src/crypto/x509name.c: Fixed segfault bug where
495 you used an X509Name after its X509 had been destroyed.
496 * src/crypto/crypto.[ch] src/crypto/x509req.c src/crypto/x509ext.[ch]:
497 Added X509 Extension support. Thanks to maas-Maarten Zeeman
498 <maas@awanim.com>
499 * src/crypto/pkey.c: Added bits() and type() methods.
500
5012002-07-08 Martin Sjögren <martin@strakt.com>
502
503 * src/ssl/connection.c: Moved the contents of setup_ssl into the
504 constructor, thereby fixing some segfault bugs :)
505 * src/ssl/connection.c: Added connect_ex and sendall methods.
506 * src/crypto/x509name.c: Cleaned up comparisons and NID lookup.
507 Thank you Maas-Maarten Zeeman <maas@awanim.com>
508 * src/rand/rand.c: Fix RAND_screen import.
509 * src/crypto/crypto.c src/crypto/pkcs7.[ch]: Added PKCS7 management,
510 courtesy of Maas-Maarten Zeeman <maas@awanim.com>
511 * src/crypto/x509req.c: Added verify method.
512
5132002-06-17 Martin Sjögren <martin@strakt.com>
514
515 * rpm/, setup.cfg: Added improved RPM-building stuff, thanks to
516 Mihai Ibanescu <misa@redhat.com>
517
5182002-06-14 Martin Sjögren <martin@strakt.com>
519
520 * examples/proxy.py: Example code for using OpenSSL through a proxy
521 contributed by Mihai Ibanescu <misa@redhat.com>
522 * Updated installation instruction and added them to the TeX manual.
523
5242002-06-13 Martin Sjögren <martin@strakt.com>
525
526 * src/ssl/context.c: Changed global_verify_callback so that it uses
527 PyObject_IsTrue instead of requring ints.
528 * Added pymemcompat.h to make the memory management uniform and
529 backwards-compatible.
530 * src/util.h: Added conditional definition of PyModule_AddObject and
531 PyModule_AddIntConstant
532 * src/ssl/connection.c: Socket methods are no longer explicitly
533 wrapped. fileno() is the only method the transport layer object HAS
534 to support, but if you want to use connect, accept or sock_shutdown,
535 then the transport layer object has to supply connect, accept
536 and shutdown respectively.
537
5382002-06-12 Martin Sjögren <martin@strakt.com>
539
540 * Changed comments to docstrings that are visible in Python.
541 * src/ssl/connection.c: Added set_connect_state and set_accept_state
542 methods. Thanks to Mark Welch <mark@collab.net> for this.
543
5442002-06-11 Martin Sjögren <martin@strakt.com>
545
546 * src/ssl/connection.c: accept and connect now use SSL_set_accept_state
547 and SSL_set_connect_state respectively, instead of SSL_accept and
548 SSL_connect.
549 * src/ssl/connection.c: Added want_read and want_write methods.
550
5512002-06-05 Martin Sjögren <martin@strakt.com>
552
553 * src/ssl/connection.c: Added error messages for windows. The code is
554 copied from Python's socketmodule.c. Ick.
555 * src/ssl/connection.c: Changed the parameters to the SysCallError. It
556 always has a tuple (number, string) now, even though the number
557 might not always be useful.
558
5592002-04-05 Martin Sjögren <md9ms@mdstud.chalmers.se>
560
561 * Worked more on the Debian packaging, hopefully the packages
562 are getting into the main Debian archive soon.
563
5642002-01-10 Martin Sjögren <martin@strakt.com>
565
566 * Worked some more on the Debian packaging, it's turning out real
567 nice.
568 * Changed format on this file, I'm going to try to be a bit more
569 verbose about my changes, and this format makes it easier.
570
5712002-01-08 Martin Sjögren <martin@strakt.com>
572
573 * Version 0.4.1
574 * Added some example code
575 * Added the thread safe Connection object in the 'tsafe' submodule
576 * New Debian packaging
577
5782001-08-09 Martin Sjögren <martin@strakt.com>
579
580 * Version 0.4
581 * Added a compare function for X509Name structures.
582 * Moved the submodules to separate .so files, with tiny C APIs so they
583 can communicate
584 * Skeletal OpenSSL/__init__.py
585 * Removed the err submodule, use crypto.Error and SSL.Error instead
586
5872001-08-06 Martin Sjögren <martin@strakt.com>
588
589 * Version 0.3
590 * Added more types for dealing with certificates (X509Store, X509Req,
591 PKey)
592 * Functionality to load private keys, certificates and certificate
593 requests from memory buffers, and store them too
594 * X509 and X509Name objects can now be modified as well, very neat when
595 creating certificates ;)
596 * Added SSL_MODE_AUTO_RETRY to smooth things for blocking sockets
597 * Added a sock_shutdown() method to the Connection type
598 * I don't understand why, but I can't use Py_InitModule() to create
599 submodules in Python 2.0, the interpreter segfaults on the cleanup
600 process when I do. I added a conditional compile on the version
601 number, falling back to my own routine. It would of course be nice to
602 investigate what is happening, but I don't have the time to do so
603 * Do INCREF on the type objects before inserting them in the
604 dictionary, so they will never reach refcount 0 (they are, after all,
605 statically allocated)
606
6072001-07-30 Martin Sjögren <martin@strakt.com>
608
609 * Version 0.2
610 * Lots of tweaking and comments in the code
611 * Now uses distutils instead of the stupid Setup file
612 * Hacked doc/tools/mkhowto, html generation should now work
613
6142001-07-16 Martin Sjögren <martin@strakt.com>
615
616 * Initial release (0.1, don't expect much from this one :-)
617