blob: d6f211d409aefcfa86b929ad95f9f12e3008955e [file] [log] [blame]
Jean-Paul Calderone9ab16c02008-03-25 15:22:47 -040012008-03-25 Jean-Paul Calderone <exarkun@twistedmatrix.com>
2
3 * src/crypto/x509name.c: Add hash and der methods to X509Name.
4
Jean-Paul Calderone3de9f622008-03-12 14:12:19 -040052008-03-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
6
7 * Fix coding problems in examples/. Remove keys and certificates
8 and add a note about how to generate new ones.
9
Jean-Paul Calderone525ef802008-03-09 20:39:42 -0400102008-03-09 Jean-Paul Calderone <exarkun@twistedmatrix.com>
11
12 * src/crypto/x509.c: Add getters and setters for the notBefore and
13 notAfter attributes of X509s.
Jean-Paul Calderoneac0d95f2008-03-10 00:00:42 -040014 * src/crypto/pkey.h, src/crypto/pkey.c, src/crypto/x509req.c,
15 src/crypto/x509.c: Track the initialized and public/private state
16 of EVP_PKEY structures underlying the crypto_PKeyObj type and
17 reject X509Req signature operations on keys not suitable for the
18 task.
Jean-Paul Calderone525ef802008-03-09 20:39:42 -040019
Jean-Paul Calderoneda92ccc2008-03-06 23:48:12 -0500202008-03-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
21
22 * src/crypto/x509name.c: Fix tp_compare so it only returns -1, 0, or
23 1. This eliminates a RuntimeWarning emitted by Python.
24 * src/crypto/x509req.c: Fix reference counting for X509Name returned
25 by X509Req.get_subject. This removes a segfault when the subject
26 name outlives the request object.
27 * src/crypto/x509.c: Change get_serial_number and set_serial_number
28 to accept Python longs.
29 * doc/pyOpenSSL.tex: A number of minor corrections.
30
Jean-Paul Calderone7df40db2008-03-03 15:12:42 -0500312008-03-03 Jean-Paul Calderone <exarkun@twistedmatrix.com>
32
33 * src/crypto/crypto.c: Expose X509_verify_cert_error_string. (patch
34 from Victor Stinner)
35
Jean-Paul Calderone12ea9a02008-02-22 12:24:39 -0500362008-02-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
37
38 * src/ssl/connection.c src/ssl/context.c src/ssl/ssl.c: Fix
39 compilation on Windows. (patch from Michael Schneider)
40
Jean-Paul Calderone72b8f0f2008-02-21 23:57:40 -0500412008-02-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
42
43 * src/ssl/connection.c: Expose SSL_get_shutdown and
44 SSL_set_shutdown. (patch from James Knight)
45 * src/ssl/ssl.c: Expose SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN.
46 (patch from James Knight)
47
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -0500482008-02-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
49
50 * src/ssl/context.c: Expose SSL_CTX_add_extra_chain_cert.
51 * src/crypto/x509name.c: Fix memory leaks in __getattr__ and
52 __setattr_ implementations.
Jean-Paul Calderone19555b92008-02-19 22:29:57 -050053 * src/crypto/x509.c: Fix memory leak in X509.get_pubkey().
54 * leakcheck/: An attempt at a systematic approach to leak
55 elimination.
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -050056
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500572004-08-13 Martin Sjögren <msjogren@gmail.com>
58
59 * Released version 0.6.
60
612004-08-11 Martin Sjögren <msjogren@gmail.com>
62
63 * doc/pyOpenSSL.tex: Updates to the docs.
64
652004-08-10 Martin Sjögren <msjogren@gmail.com>
66
67 * src/crypto/x509.c: Add X509.add_extensions based on a patch
68 from Han S. Lee.
69 * src/ssl/ssl.c: Add more SSL_OP_ constants. Patch from Mihai
70 Ibanescu.
71
722004-08-09 Martin Sjögren <msjogren@gmail.com>
73
74 * setup.py src/crypto/: Add support for Netscape SPKI extensions
75 based on a patch from Tollef Fog Heen.
76 * src/crypto/crypto.c: Add support for python passphrase callbacks
77 based on a patch from Robert Olson.
78
792004-08-03 Martin Sjögren <msjogren@gmail.com>
80
81 * src/ssl/context.c: Applied patch from Frederic Peters to add
82 Context.use_certificate_chain_file.
83 * src/crypto/x509.c: Applid patch from Tollef Fog Heen to add
84 X509.subject_name_hash and X509.digest.
85
862004-08-02 Martin Sjögren <msjogren@gmail.com>
87
88 * src/crypto/crypto.c src/ssl/ssl.c: Applied patch from Bastian
89 Kleineidam to fix full names of exceptions.
90
912004-07-19 Martin Sjögren <msjogren@gmail.com>
92
93 * doc/pyOpenSSL.tex: Fix the errors regarding X509Name's field names.
94
952004-07-18 Martin Sjögren <msjogren@gmail.com>
96
97 * examples/certgen.py: Fixed wrong attributes in doc string, thanks
98 Remy. (SFbug#913315)
99 * __init__.py, setup.py, version.py: Add __version__, as suggested by
100 Ronald Oussoren in SFbug#888729.
101 * examples/proxy.py: Fix typos, thanks Mihai Ibanescu. (SFpatch#895820)
102
1032003-01-09 Martin Sjögren <martin@strakt.com>
104
105 * Use cyclic GC protocol in SSL.Connection, SSL.Context, crypto.PKCS12
106 and crypto.X509Name.
107
1082002-12-02 Martin Sjögren <martin@strakt.com>
109
110 * tsafe.py: Add some missing methods.
111
1122002-10-06 Martin Sjögren <martin@strakt.com>
113
114 * __init__.py: Import tsafe too!
115
1162002-10-05 Martin Sjögren <martin@strakt.com>
117
118 * src/crypto/x509name.c: Use unicode strings instead of ordinary
119 strings in getattr/setattr. Note that plain ascii strings should
120 still work.
121
1222002-09-17 Martin Sjögren <martin@strakt.com>
123
124 * Released version 0.5.1.
125
1262002-09-09 Martin Sjögren <martin@strakt.com>
127
128 * setup.cfg: Fixed build requirements for rpms.
129
1302002-09-07 Martin Sjögren <martin@strakt.com>
131
132 * src/ssl/connection.c: Fix sendall() method. It segfaulted because
133 it was too generous about giving away the GIL.
134 * Added SecureXMLRPCServer example, contributed by Michal Wallace.
135
1362002-09-06 Martin Sjögren <martin@strakt.com>
137
138 * setup.cfg: Updated the build requirements.
139 * src/ssl/connection.c: Fix includes for AIX.
140
1412002-09-04 Anders Hammarquist <iko@strakt.com>
142
143 * Added type checks in all the other places where we expect
144 specific types of objects passed.
145
1462002-09-04 Martin Sjögren <martin@strakt.com>
147
148 * src/crypto/crypto.c: Added an explicit type check in the dump_*
149 functions, so that they won't die when e.g. None is passed in.
150
1512002-08-25 Martin Sjögren <martin@strakt.com>
152
153 * doc/pyOpenSSL.tex: Docs for PKCS12.
154
1552002-08-24 Martin Sjögren <martin@strakt.com>
156
157 * src/crypto: Added basic PKCS12 support, thanks to Mark Welch
158 <mark@collab.net>
159
1602002-08-16 Martin Sjögren <martin@strakt.com>
161
162 * D'oh! Fixes for python 1.5 and python 2.1.
163
1642002-08-15 Martin Sjögren <martin@strakt.com>
165
166 * Version 0.5. Yay!
167
1682002-07-25 Martin Sjögren <martin@strakt.com>
169
170 * src/ssl/context.c: Added set_options method.
171 * src/ssl/ssl.c: Added constants for Context.set_options method.
172
1732002-07-23 Martin Sjögren <martin@strakt.com>
174
175 * Updated docs
176 * src/ssl/connection.c: Changed the get_cipher_list method to actually
177 return a list! WARNING: This change makes the API incompatible with
178 earlier versions!
179
1802002-07-15 Martin Sjögren <martin@strakt.com>
181
182 * src/ssl/connection.[ch]: Removed the fileno method, it uses the
183 transport object's fileno instead.
184
1852002-07-09 Martin Sjögren <martin@strakt.com>
186
187 * src/crypto/x509.c src/crypto/x509name.c: Fixed segfault bug where
188 you used an X509Name after its X509 had been destroyed.
189 * src/crypto/crypto.[ch] src/crypto/x509req.c src/crypto/x509ext.[ch]:
190 Added X509 Extension support. Thanks to maas-Maarten Zeeman
191 <maas@awanim.com>
192 * src/crypto/pkey.c: Added bits() and type() methods.
193
1942002-07-08 Martin Sjögren <martin@strakt.com>
195
196 * src/ssl/connection.c: Moved the contents of setup_ssl into the
197 constructor, thereby fixing some segfault bugs :)
198 * src/ssl/connection.c: Added connect_ex and sendall methods.
199 * src/crypto/x509name.c: Cleaned up comparisons and NID lookup.
200 Thank you Maas-Maarten Zeeman <maas@awanim.com>
201 * src/rand/rand.c: Fix RAND_screen import.
202 * src/crypto/crypto.c src/crypto/pkcs7.[ch]: Added PKCS7 management,
203 courtesy of Maas-Maarten Zeeman <maas@awanim.com>
204 * src/crypto/x509req.c: Added verify method.
205
2062002-06-17 Martin Sjögren <martin@strakt.com>
207
208 * rpm/, setup.cfg: Added improved RPM-building stuff, thanks to
209 Mihai Ibanescu <misa@redhat.com>
210
2112002-06-14 Martin Sjögren <martin@strakt.com>
212
213 * examples/proxy.py: Example code for using OpenSSL through a proxy
214 contributed by Mihai Ibanescu <misa@redhat.com>
215 * Updated installation instruction and added them to the TeX manual.
216
2172002-06-13 Martin Sjögren <martin@strakt.com>
218
219 * src/ssl/context.c: Changed global_verify_callback so that it uses
220 PyObject_IsTrue instead of requring ints.
221 * Added pymemcompat.h to make the memory management uniform and
222 backwards-compatible.
223 * src/util.h: Added conditional definition of PyModule_AddObject and
224 PyModule_AddIntConstant
225 * src/ssl/connection.c: Socket methods are no longer explicitly
226 wrapped. fileno() is the only method the transport layer object HAS
227 to support, but if you want to use connect, accept or sock_shutdown,
228 then the transport layer object has to supply connect, accept
229 and shutdown respectively.
230
2312002-06-12 Martin Sjögren <martin@strakt.com>
232
233 * Changed comments to docstrings that are visible in Python.
234 * src/ssl/connection.c: Added set_connect_state and set_accept_state
235 methods. Thanks to Mark Welch <mark@collab.net> for this.
236
2372002-06-11 Martin Sjögren <martin@strakt.com>
238
239 * src/ssl/connection.c: accept and connect now use SSL_set_accept_state
240 and SSL_set_connect_state respectively, instead of SSL_accept and
241 SSL_connect.
242 * src/ssl/connection.c: Added want_read and want_write methods.
243
2442002-06-05 Martin Sjögren <martin@strakt.com>
245
246 * src/ssl/connection.c: Added error messages for windows. The code is
247 copied from Python's socketmodule.c. Ick.
248 * src/ssl/connection.c: Changed the parameters to the SysCallError. It
249 always has a tuple (number, string) now, even though the number
250 might not always be useful.
251
2522002-04-05 Martin Sjögren <md9ms@mdstud.chalmers.se>
253
254 * Worked more on the Debian packaging, hopefully the packages
255 are getting into the main Debian archive soon.
256
2572002-01-10 Martin Sjögren <martin@strakt.com>
258
259 * Worked some more on the Debian packaging, it's turning out real
260 nice.
261 * Changed format on this file, I'm going to try to be a bit more
262 verbose about my changes, and this format makes it easier.
263
2642002-01-08 Martin Sjögren <martin@strakt.com>
265
266 * Version 0.4.1
267 * Added some example code
268 * Added the thread safe Connection object in the 'tsafe' submodule
269 * New Debian packaging
270
2712001-08-09 Martin Sjögren <martin@strakt.com>
272
273 * Version 0.4
274 * Added a compare function for X509Name structures.
275 * Moved the submodules to separate .so files, with tiny C APIs so they
276 can communicate
277 * Skeletal OpenSSL/__init__.py
278 * Removed the err submodule, use crypto.Error and SSL.Error instead
279
2802001-08-06 Martin Sjögren <martin@strakt.com>
281
282 * Version 0.3
283 * Added more types for dealing with certificates (X509Store, X509Req,
284 PKey)
285 * Functionality to load private keys, certificates and certificate
286 requests from memory buffers, and store them too
287 * X509 and X509Name objects can now be modified as well, very neat when
288 creating certificates ;)
289 * Added SSL_MODE_AUTO_RETRY to smooth things for blocking sockets
290 * Added a sock_shutdown() method to the Connection type
291 * I don't understand why, but I can't use Py_InitModule() to create
292 submodules in Python 2.0, the interpreter segfaults on the cleanup
293 process when I do. I added a conditional compile on the version
294 number, falling back to my own routine. It would of course be nice to
295 investigate what is happening, but I don't have the time to do so
296 * Do INCREF on the type objects before inserting them in the
297 dictionary, so they will never reach refcount 0 (they are, after all,
298 statically allocated)
299
3002001-07-30 Martin Sjögren <martin@strakt.com>
301
302 * Version 0.2
303 * Lots of tweaking and comments in the code
304 * Now uses distutils instead of the stupid Setup file
305 * Hacked doc/tools/mkhowto, html generation should now work
306
3072001-07-16 Martin Sjögren <martin@strakt.com>
308
309 * Initial release (0.1, don't expect much from this one :-)
310