blob: 12cd8b6e9bcd35bed344a11deef0cb250e7c6a0d [file] [log] [blame]
Jean-Paul Calderoneff83cdd2013-08-12 18:05:51 -040012013-08-11 Christian Heimes <christian@python.org>
2
3 * OpenSSL/crypto/x509ext.c: Fix handling of NULL bytes inside
Jean-Paul Calderonede1a6822013-08-23 15:21:30 -04004 subjectAltName general names when formatting an X509 extension
5 as a string.
Jean-Paul Calderoneff83cdd2013-08-12 18:05:51 -04006 * OpenSSL/crypto/x509.c: Fix memory leak in get_extension().
7
Jean-Paul Calderoneffe420a2012-04-03 15:25:07 -040082012-04-03 Jean-Paul Calderone <exarkun@twistedmatrix.com>
9
10 * OpenSSL/crypto/pkey.c: Release the GIL around RSA and DSA key
11 generation, based on code from INADA Naoki.
12
Jean-Paul Calderone593a06d2012-02-13 08:15:07 -0500132012-02-13 Jean-Paul Calderone <exarkun@twistedmatrix.com>
14
15 * OpenSSL/ssl/ssl.c: Add session cache related constants for use
16 with the new Context.set_session_cache_mode method.
17
18 * OpenSSL/ssl/context.c: Add new Context methods
19 set_session_cache_mode and get_session_cache_mode.
20
212011-11-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone22d915f2011-11-01 10:17:25 -040022
23 * OpenSSL/crypto/pkey.c: Raise TypeError when trying to check a
24 PKey instance which has no private component, instead of crashing.
25 Based on fix by <lp:~dataway>.
26
Jean-Paul Calderone56b2fb82011-09-14 11:23:38 -0400272011-09-14 Žiga Seilnacht <lp:ziga-seilnacht>
28
29 * OpenSSL/crypto/crypto.c: Allow exceptions from passphrase
30 callbacks to propagate up out of load_privatekey
31 * OpenSSL/crypto/crypto.c: Raise an exception when a too-long
32 passphrase is returned from a passphrase callback, instead of
33 silently truncating it.
34 * OpenSSL/crypto/crypto.c: Fix a memory leak when a passphrase
35 callback returns the wrong type.
36
Jean-Paul Calderonec7293bc2011-09-13 15:24:38 -0400372011-09-13 Jean-Paul Calderone <exarkun@twistedmatrix.com>
38
39 * OpenSSL/crypto/crl.c: Add error handling for the use of
40 X509_CRL_sign.
41
Jean-Paul Calderone54d99bc2011-09-11 15:49:43 -0400422011-09-11 Jonathan Ballet <lp:multani>
43
44 * doc/: Convert the LaTeX documentation to Sphinx-using ReST.
45 * OpenSSL/: Convert the epytext API documentation to Sphinx-using ReST.
46
Jean-Paul Calderone8afc7fc2011-09-08 18:42:51 -0400472011-09-08 Guillermo Gonzalez <guillermo.gonzalez@canonical.com>
Guillermo Gonzalez74a2c292011-08-29 16:16:58 -030048
49 * OpenSSL/ssl/context.c: Add Context.set_mode method.
50 * OpenSSL/ssl/ssl.c: Add MODE_RELEASE_BUFFERS and OP_NO_COMPRESSION
51 constants.
52
Jean-Paul Calderonebb960a62011-09-02 11:43:50 -0400532011-09-02 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone9695e8a2011-08-14 18:10:06 -040054
55 * Release 0.13
56
Jean-Paul Calderoneeecb1982011-06-12 17:34:44 -0400572011-06-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
58
Jean-Paul Calderone042b66d2011-06-12 21:56:13 -040059 * OpenSSL/crypto/pkey.c: Add the PKey.check method, mostly
60 implemented by Rick Dean, to verify the internal consistency of a
61 PKey instance.
62
632011-06-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
64
Jean-Paul Calderoneeecb1982011-06-12 17:34:44 -040065 * OpenSSL/crypto/crypto.c: Fix the sign and verify functions so
66 they handle data with embedded NULs. Fix by David Brodsky
67 <lp:~lihalla>.
68
Jean-Paul Calderoneee6532d2011-05-20 20:10:39 -0400692011-05-20 Jean-Paul Calderone <exarkun@twistedmatrix.com>
70
71 * OpenSSL/ssl/connection.c, OpenSSL/test/test_ssl.py: Add a new
72 method to the Connection type, get_peer_cert_chain, for retrieving
73 the peer's certificate chain.
74
Jean-Paul Calderone9c771672011-05-19 17:54:07 -0400752011-05-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
76
77 * OpenSSL/crypto/x509.c, OpenSSL/test/test_crypto.py: Add a new
78 method to the X509 type, get_signature_algorithm, for inspecting
79 the signature algorithm field of the certificate. Based on a
80 patch from <lp:~okuda>.
81
Jean-Paul Calderone9eff5692011-05-10 20:24:34 -0400822011-05-10 Jean-Paul Calderone <exarkun@twistedmatrix.com>
83
84 * OpenSSL/crypto/crypto.h: Work around a Windows/OpenSSL 1.0 issue
85 explicitly including a Windows header before any OpenSSL headers.
86
87 * OpenSSL/crypto/pkcs12.c: Work around an OpenSSL 1.0 issue by
88 explicitly flushing errors known to be uninteresting after calling
89 PKCS12_parse.
90
91 * OpenSSL/ssl/context.c: Remove SSLv2 support if the underlying
92 OpenSSL library does not provide it.
93
94 * OpenSSL/test/test_crypto.py: Support an OpenSSL 1.0 change from
95 MD5 to SHA1 by allowing either hash algorithm's result as the
96 return value of X509.subject_name_hash.
97
98 * OpenSSL/test/test_ssl.py: Support an OpenSSL 1.0 change from MD5
99 to SHA1 by constructing certificate files named using both hash
100 algorithms' results when testing Context.load_verify_locations.
101
102 * Support OpenSSL 1.0.0a.
103
1042011-04-15 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone2309cd62011-04-15 12:17:53 -0400105
106 * OpenSSL/ssl/ssl.c: Add OPENSSL_VERSION_NUMBER, SSLeay_version
107 and related constants for retrieving version information about the
108 underlying OpenSSL library.
109
Jean-Paul Calderonefc572cf2011-04-07 15:48:16 -04001102011-04-07 Jean-Paul Calderone <exarkun@twistedmatrix.com>
111
112 * Release 0.12
113
Jean-Paul Calderonec2d2bdb2011-04-06 22:19:52 -04001142011-04-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
115
116 * OpenSSL/crypto/x509.c: Add get_extension_count and get_extension
117 to the X509 type, allowing read access to certificate extensions.
118
119 * OpenSSL/crypto/x509ext.c: Add get_short_name and get_data to the
120 X509Extension type, allowing read access to the contents of an
121 extension.
122
Jean-Paul Calderonef65fe482011-03-21 19:16:40 -04001232011-03-21 Olivier Hervieu <lp:~ohe>
124
125 * OpenSSL/ssl/ssl.c: Expose a number of symbolic constants for
126 values passed to the connection "info" callback.
127
Jean-Paul Calderonef6a4a7c2011-01-22 10:04:48 -05001282011-01-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
129
130 * OpenSSL/ssl/connection.py: Add support for new-style
131 buffers (primarily memoryviews) to Connection.send and
132 Connection.sendall.
133
Jean-Paul Calderone8e1716f2010-11-01 17:43:15 -04001342010-11-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone7cb3f6d2010-10-31 10:36:23 -0400135
136 * Release 0.11
137
Jean-Paul Calderoned16a3642010-10-07 22:19:58 -04001382010-10-07 Jean-Paul Calderone <exarkun@twistedmatrix.com>
139
140 * Initial support for Python 3.x throughout the codebase.
141
Jean-Paul Calderone84fd3742010-09-14 18:05:45 -04001422010-09-14 Jean-Paul Calderone <exarkun@twistedmatrix.com>
143
144 * OpenSSL/crypto/netscape_spki.c: Fix an off-by-one mistake in the
145 error handling for NetscapeSPKI.verify. Add additional error
146 checking to NetscapeSPKI.sign to handle the case where there is no
147 private key.
148
149 * OpenSSL/crypto/x509.c: Fix an overflow bug in the subject_name_hash
150 method of the X509 type which would cause it to return negative
151 values on 32 bit systems.
152
153 * OpenSSL/crypto/x509req.c: Fix an off-by-one mistake in the error
154 handling for X509Req.verify.
155
156 * OpenSSL/ssl/context.c: Fix the error handling in the load_tmp_dh
157 method of the Context type which would cause it to always raise
158 MemoryError, regardless of the actual error (such as a bad file
159 name).
160
161 * OpenSSL/test/: Numerous unit tests added, both for above fixes
162 and for other previously untested code paths.
163
Jean-Paul Calderone6d78fed2010-07-27 21:47:22 -04001642010-07-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
165
166 * Re-arrange the repository so that the package can be built and
167 used in-place without requiring installation.
168
James Yonan7c2e5d32010-02-27 05:45:50 -07001692010-02-27 James Yonan <james@openvpn.net>
170
171 * src/crypto/crypto.c: Added crypto.sign and crypto.verify methods
172 that wrap EVP_Sign and EVP_Verify function families, using code
173 derived from Dave Cridland's PyOpenSSL branch.
174
175 * test/test_crypto.py: Added unit tests for crypto.sign and
176 crypto.verify.
177
Jean-Paul Calderone40b32a22010-01-27 16:56:44 -05001782010-01-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
179
180 * src/ssl/connection.c, src/util.h: Apply patch from Sandro Tosi to
181 fix misspellings of "compatibility".
182
Jean-Paul Calderone5cc61972009-11-13 09:16:32 -05001832009-11-13 Jean-Paul Calderone <exarkun@twistedmatrix.com>
184
185 * Release 0.10
186
Jean-Paul Calderone76751912009-11-12 07:51:04 -05001872009-11-07 Žiga Seilnacht, Jean-Paul Calderone <exarkun@twistedmatrix.com>
188
189 * src/ssl/connection.c, src/ssl/context.c: Add set_client_ca_list,
190 add_client_ca, and get_client_ca_list to Context for manipulating
191 the list of certificate authority names which are sent by servers
192 with the certificate request message.
193 * src/util.h: Add ssize-related defines if the version of Python
194 being used does not have them.
195 * setup.py: Significant changes to the way Windows builds are done,
196 particularly the way OpenSSL headers and libraries are found (with
197 the new --with-openssl argument to build_ext).
198
Jean-Paul Calderone2953db82009-08-27 13:20:38 -04001992009-08-27 Rick Dean <rick@fdd.com>, Jean-Paul Calderone <exarkun@twistedmatrix.com>
200
201 * src/crypto/pkcs12.c: Add setters to the PKCS12 type for the
202 certificate, private key, ca certificate list, and friendly
203 name, and add a getter for the friendly name. Also add a method
204 for exporting a PKCS12 object as a string.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400205 * test/test_crypto.py: Add lots of additional tests for the PKCS12
206 type.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400207 * doc/pyOpenSSL.tex: Documentation for the new PKCS12 methods.
208
2092009-07-17 Rick Dean <rick@fdd.com>, Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderone9ac425c2009-07-17 16:06:12 -0400210
211 * src/crypto/x509ext.c: Add subject and issuer parameters to
212 X509Extension, allowing creation of extensions which require that
213 information. Fixes LP#322813.
214
Jean-Paul Calderone8b327992009-07-16 18:52:14 -04002152009-07-16 Jean-Paul Calderone <exarkun@twistedmatrix.com>
216
217 * test/util.py: Changed the base TestCase's tearDown to assert that
218 no errors were left in the OpenSSL error queue by the test.
219 * src/crypto/crypto.c: Add a private helper in support of the
220 TestCase.tearDown change.
221 * src/crypto/x509name.c: Changed X509Name's getattr implementation
222 to clean up the error queue. Fixes LP#314814.
223 * test/util.c: Changed flush_error_queue to avoid a reference
224 counting bug caused by macro expansion.
225
Jean-Paul Calderoneb3b94e02009-07-16 14:07:28 -04002262009-07-16 Rick Dean <rick@fdd.com>
227
228 * src/rand.c: Added OpenSSL.rand.bytes to get random bytes directly.
229 * src/util.c: Added generic exceptions_from_error_queue to replace
230 the various other implementations of this function. Also updated
231 the rest of the codebase to use this version instead.
232
Jean-Paul Calderone0b88b6a2009-07-05 12:44:41 -04002332009-07-05 Jean-Paul Calderone <exarkun@twistedmatrix.com>
234
Jean-Paul Calderone18808652009-07-05 12:54:05 -0400235 * test/util.py, test/test_ssl.py, test/test_crypto.py: Fold the
236 Python 2.3 compatibility TestCase mixin into the TestCase defined
237 in util.py.
238
2392009-07-05 Jean-Paul Calderone <exarkun@twistedmatrix.com>
240
Jean-Paul Calderone0b88b6a2009-07-05 12:44:41 -0400241 * test/util.py, test/test_ssl.py, test/test_crypto.py: Stop trying
242 to use Twisted's TestCase even when it's available. Instead,
243 always use the stdlib TestCase with a few enhancements.
244
Jean-Paul Calderonefdc5a0a2009-07-04 15:48:42 -04002452009-07-04 Jean-Paul Calderone <exarkun@twistedmatrix.com>
246
247 * Changed most extension types so that they can be instantiated
248 using the type object rather than a factory function. The old
249 factory functions are now aliases for the type objects.
250 Fixes LP#312786.
251
Jean-Paul Calderonea96bfed2009-05-27 08:47:34 -04002522009-05-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
253
Jean-Paul Calderone54bcc832009-05-27 14:06:48 -0400254 * Changed all docstrings in extension modules to be friendlier
255 towards Python programmers. Fixes LP#312787.
256
2572009-05-27 Jean-Paul Calderone <exarkun@twistedmatrix.com>
258
Jean-Paul Calderonea96bfed2009-05-27 08:47:34 -0400259 * src/crypto/x509ext.c: Correctly deallocate the new Extension
260 instance when there is an error initializing it and it is not
261 going to be returned. Resolves LP#368043.
262
Jean-Paul Calderoned683f2d2009-05-11 10:47:42 -04002632009-05-11 Jean-Paul Calderone <exarkun@twistedmatrix.com>
264
265 * test/test_crypto.py: Use binary mode for the pipe to talk to the
266 external openssl binary. The data being transported over this
267 pipe is indeed binary, so previously it would often be truncated
268 or otherwise mangled.
269
270 * src/ssl/connection.h, src/ssl/connection.c, test/test_ssl.py:
271 Extend the Connection class with support for in-memory BIOs. This
272 allows SSL to be run without a real socket, useful for
273 implementing EAP-TLS or using SSL with Windows IO completion
Jean-Paul Calderoneb0921592009-05-11 10:48:41 -0400274 ports, for example. Based heavily on contributions from Rick
275 Dean.
Jean-Paul Calderoned683f2d2009-05-11 10:47:42 -0400276
Jean-Paul Calderone71ff3682009-04-25 08:30:11 -04002772009-04-25 Jean-Paul Calderone <exarkun@twistedmatrix.com>
278
279 * Release 0.9
280
Jean-Paul Calderoneb8a70732009-04-01 14:49:13 -04002812009-04-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderoneec48cd52009-04-01 19:01:41 -0400282 Samuele Pedroni <pedronis@openend.se>
283
284 * src/util.h: Delete the TLS key before trying to set a new value
285 for it in case the current thread identifier is a recycled one (if
286 it is recycled, the key won't be set because there is already a
287 value from the previous thread to have this identifier and to use
288 the pyOpenSSL API).
289
2902009-04-01 Jean-Paul Calderone <exarkun@twistedmatrix.com>
Jean-Paul Calderoneb8a70732009-04-01 14:49:13 -0400291
292 * src/crypto/crypto.c: Add FILETYPE_TEXT for dumping keys and
293 certificates and certificate signature requests to a text format.
294
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -05002952008-12-31 Jean-Paul Calderone <exarkun@twistedmatrix.com>
296
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -0500297 * src/crypto/x509ext.c, test/test_crypto.py: Add the get_short_name
298 method to X509Extension based on patch from Alex Stapleton.
Jean-Paul Calderone2953db82009-08-27 13:20:38 -0400299
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -05003002008-12-31 Jean-Paul Calderone <exarkun@twistedmatrix.com>
301
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500302 * src/crypto/x509ext.c, test/test_crypto.py: Fix X509Extension so
303 that it is possible to instantiate extensions which use s2i or r2i
304 instead of v2i (an extremely obscure extension implementation
305 detail).
306
Jean-Paul Calderone24e2b0b2008-12-30 15:12:11 -05003072008-12-30 Jean-Paul Calderone <exarkun@twistedmatrix.com>
308
309 * MANIFEST.in, src/crypto/crypto.c, src/crypto/x509.c,
310 src/crypto/x509name.c, src/rand/rand.c, src/ssl/context.c: Changes
311 which eliminate compiler warnings but should not change any
312 behavior.
313
Jean-Paul Calderone8dd19b82008-12-28 20:41:16 -05003142008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
315
Jean-Paul Calderone327d8f92008-12-28 21:55:56 -0500316 * test/test_ssl.py, src/ssl/ssl.c: Expose DTLS-related constants,
317 OP_NO_QUERY_MTU, OP_COOKIE_EXCHANGE, and OP_NO_TICKET.
318
3192008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
320
Jean-Paul Calderoneaa9c7972008-09-07 21:27:49 -0400321 * src/ssl/context.c: Add a capath parameter to
322 Context.load_verify_locations to allow Python code to specify
323 either or both arguments to the underlying
324 SSL_CTX_load_verify_locations API.
325 * src/ssl/context.c: Add Context.set_default_verify_paths, a wrapper
326 around SSL_CTX_set_default_verify_paths.
327
Jean-Paul Calderone5b000d72008-12-28 21:09:53 -05003282008-12-28 Jean-Paul Calderone <exarkun@twistedmatrix.com>
329
Jean-Paul Calderone8dd19b82008-12-28 20:41:16 -0500330 * test/test_crypto.py, src/crypto/x509req.c: Added get_version and
331 set_version_methods to X509ReqType based on patch from Wouter van
332 Bommel. Resolves LP#274418.
333
Jean-Paul Calderonef7f0fb42008-10-19 11:55:13 -04003342008-09-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
335
336 * Release 0.8
337
Jean-Paul Calderone002bf462008-10-19 11:35:40 -04003382008-10-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
339
340 * tsafe.py: Revert the deprecation of the thread-safe Connection
341 wrapper. The Connection class should not segfault if used from
342 multiple threads now, but it generally cannot be relied on to
343 produce correct results if used without the thread-safe wrapper.
Jean-Paul Calderone1eeb29e2008-10-19 11:50:53 -0400344 * doc/pyOpenSSL.tex: Correct the documentation for the set_passwd_cb
345 callback parameter so that it accurately describes the required
346 signature.
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400347
Jean-Paul Calderonea319ca92008-09-22 08:45:40 -04003482008-09-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
349
Jean-Paul Calderoneb5fdbbf2008-09-22 09:04:09 -0400350 * Release 0.8a1
351
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -04003522008-09-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
353
354 * src/ssl/ssl.h, src/ssl/ssl.c: Add a thread-local storage key
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400355 which will be used to store and retrieve PyThreadState pointers
356 whenever it is necessary to release or re-acquire the GIL.
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -0400357
358 * src/ssl/context.c: Change global_verify_callback so that it
Jean-Paul Calderone002bf462008-10-19 11:35:40 -0400359 unconditionally manipulates the Python threadstate, rather than
360 checking the tstate field which is now always NULL.
Jean-Paul Calderoneb7d6db22008-09-21 18:57:56 -0400361
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -04003622008-04-26 Jean-Paul Calderone <exarkun@twistedmatrix.com>
363
Jean-Paul Calderone5ef86512008-04-26 19:06:28 -0400364 * src/ssl/context.c: Change global_passphrase_callback and
365 global_info_callback so that they acquire the GIL before
366 invoking any CPython APIs and do not release it until after they
367 are finished invoking all of them (based heavily on on patch
368 from Dan Williams).
Jean-Paul Calderoneaea5d902008-04-26 19:53:39 -0400369 * src/ssl/crypto.c: Initialize OpenSSL thread support so that it
370 is valid to use OpenSSL APIs from more than one thread (based on
371 patch from Dan Williams).
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400372 * test/test_crypto.py: Add tests for load_privatekey and
373 dump_privatekey when a passphrase or a passphrase callback is
374 supplied.
Jean-Paul Calderone5ef86512008-04-26 19:06:28 -0400375 * test/test_ssl.py: Add tests for Context.set_passwd_cb and
376 Context.set_info_callback.
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400377
Jean-Paul Calderonee53ccf72008-04-11 11:40:39 -04003782008-04-11 Jean-Paul Calderone <exarkun@twistedmatrix.com>
379
380 * Release 0.7
381
Jean-Paul Calderonec54cc182008-03-26 21:11:07 -04003822008-03-26 Jean-Paul Calderone <exarkun@twistedmatrix.com>
383
384 * src/crypto/x509name.c: Add X509Name.get_components
385
Jean-Paul Calderone9ab16c02008-03-25 15:22:47 -04003862008-03-25 Jean-Paul Calderone <exarkun@twistedmatrix.com>
387
388 * src/crypto/x509name.c: Add hash and der methods to X509Name.
Jean-Paul Calderonec8215432008-03-25 15:34:21 -0400389 * src/crypto/x509.c: Fix a bug in X509.get_notBefore and
390 X509.get_notAfter preventing UTCTIME format timestamps from
391 working.
Jean-Paul Calderone9ab16c02008-03-25 15:22:47 -0400392
Jean-Paul Calderone3de9f622008-03-12 14:12:19 -04003932008-03-12 Jean-Paul Calderone <exarkun@twistedmatrix.com>
394
395 * Fix coding problems in examples/. Remove keys and certificates
396 and add a note about how to generate new ones.
397
Jean-Paul Calderone525ef802008-03-09 20:39:42 -04003982008-03-09 Jean-Paul Calderone <exarkun@twistedmatrix.com>
399
400 * src/crypto/x509.c: Add getters and setters for the notBefore and
401 notAfter attributes of X509s.
Jean-Paul Calderoneac0d95f2008-03-10 00:00:42 -0400402 * src/crypto/pkey.h, src/crypto/pkey.c, src/crypto/x509req.c,
403 src/crypto/x509.c: Track the initialized and public/private state
404 of EVP_PKEY structures underlying the crypto_PKeyObj type and
405 reject X509Req signature operations on keys not suitable for the
406 task.
Jean-Paul Calderone525ef802008-03-09 20:39:42 -0400407
Jean-Paul Calderoneda92ccc2008-03-06 23:48:12 -05004082008-03-06 Jean-Paul Calderone <exarkun@twistedmatrix.com>
409
410 * src/crypto/x509name.c: Fix tp_compare so it only returns -1, 0, or
411 1. This eliminates a RuntimeWarning emitted by Python.
412 * src/crypto/x509req.c: Fix reference counting for X509Name returned
413 by X509Req.get_subject. This removes a segfault when the subject
414 name outlives the request object.
415 * src/crypto/x509.c: Change get_serial_number and set_serial_number
416 to accept Python longs.
417 * doc/pyOpenSSL.tex: A number of minor corrections.
418
Jean-Paul Calderone7df40db2008-03-03 15:12:42 -05004192008-03-03 Jean-Paul Calderone <exarkun@twistedmatrix.com>
420
421 * src/crypto/crypto.c: Expose X509_verify_cert_error_string. (patch
422 from Victor Stinner)
423
Jean-Paul Calderone12ea9a02008-02-22 12:24:39 -05004242008-02-22 Jean-Paul Calderone <exarkun@twistedmatrix.com>
425
426 * src/ssl/connection.c src/ssl/context.c src/ssl/ssl.c: Fix
427 compilation on Windows. (patch from Michael Schneider)
428
Jean-Paul Calderone72b8f0f2008-02-21 23:57:40 -05004292008-02-21 Jean-Paul Calderone <exarkun@twistedmatrix.com>
430
431 * src/ssl/connection.c: Expose SSL_get_shutdown and
432 SSL_set_shutdown. (patch from James Knight)
433 * src/ssl/ssl.c: Expose SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN.
434 (patch from James Knight)
435
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -05004362008-02-19 Jean-Paul Calderone <exarkun@twistedmatrix.com>
437
438 * src/ssl/context.c: Expose SSL_CTX_add_extra_chain_cert.
439 * src/crypto/x509name.c: Fix memory leaks in __getattr__ and
440 __setattr_ implementations.
Jean-Paul Calderone19555b92008-02-19 22:29:57 -0500441 * src/crypto/x509.c: Fix memory leak in X509.get_pubkey().
442 * leakcheck/: An attempt at a systematic approach to leak
443 elimination.
Jean-Paul Calderone779db6b2008-02-19 21:00:37 -0500444
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05004452004-08-13 Martin Sjögren <msjogren@gmail.com>
446
447 * Released version 0.6.
448
4492004-08-11 Martin Sjögren <msjogren@gmail.com>
450
451 * doc/pyOpenSSL.tex: Updates to the docs.
452
4532004-08-10 Martin Sjögren <msjogren@gmail.com>
454
455 * src/crypto/x509.c: Add X509.add_extensions based on a patch
456 from Han S. Lee.
457 * src/ssl/ssl.c: Add more SSL_OP_ constants. Patch from Mihai
458 Ibanescu.
459
4602004-08-09 Martin Sjögren <msjogren@gmail.com>
461
462 * setup.py src/crypto/: Add support for Netscape SPKI extensions
463 based on a patch from Tollef Fog Heen.
464 * src/crypto/crypto.c: Add support for python passphrase callbacks
465 based on a patch from Robert Olson.
466
4672004-08-03 Martin Sjögren <msjogren@gmail.com>
468
469 * src/ssl/context.c: Applied patch from Frederic Peters to add
470 Context.use_certificate_chain_file.
471 * src/crypto/x509.c: Applid patch from Tollef Fog Heen to add
472 X509.subject_name_hash and X509.digest.
473
4742004-08-02 Martin Sjögren <msjogren@gmail.com>
475
476 * src/crypto/crypto.c src/ssl/ssl.c: Applied patch from Bastian
477 Kleineidam to fix full names of exceptions.
478
4792004-07-19 Martin Sjögren <msjogren@gmail.com>
480
481 * doc/pyOpenSSL.tex: Fix the errors regarding X509Name's field names.
Jean-Paul Calderone828c9cb2008-04-26 18:06:54 -0400482
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05004832004-07-18 Martin Sjögren <msjogren@gmail.com>
484
485 * examples/certgen.py: Fixed wrong attributes in doc string, thanks
486 Remy. (SFbug#913315)
487 * __init__.py, setup.py, version.py: Add __version__, as suggested by
488 Ronald Oussoren in SFbug#888729.
489 * examples/proxy.py: Fix typos, thanks Mihai Ibanescu. (SFpatch#895820)
490
4912003-01-09 Martin Sjögren <martin@strakt.com>
492
493 * Use cyclic GC protocol in SSL.Connection, SSL.Context, crypto.PKCS12
494 and crypto.X509Name.
495
4962002-12-02 Martin Sjögren <martin@strakt.com>
497
498 * tsafe.py: Add some missing methods.
499
5002002-10-06 Martin Sjögren <martin@strakt.com>
501
502 * __init__.py: Import tsafe too!
503
5042002-10-05 Martin Sjögren <martin@strakt.com>
505
506 * src/crypto/x509name.c: Use unicode strings instead of ordinary
507 strings in getattr/setattr. Note that plain ascii strings should
508 still work.
509
5102002-09-17 Martin Sjögren <martin@strakt.com>
511
512 * Released version 0.5.1.
513
5142002-09-09 Martin Sjögren <martin@strakt.com>
515
516 * setup.cfg: Fixed build requirements for rpms.
517
5182002-09-07 Martin Sjögren <martin@strakt.com>
519
520 * src/ssl/connection.c: Fix sendall() method. It segfaulted because
521 it was too generous about giving away the GIL.
522 * Added SecureXMLRPCServer example, contributed by Michal Wallace.
523
5242002-09-06 Martin Sjögren <martin@strakt.com>
525
526 * setup.cfg: Updated the build requirements.
527 * src/ssl/connection.c: Fix includes for AIX.
528
5292002-09-04 Anders Hammarquist <iko@strakt.com>
530
531 * Added type checks in all the other places where we expect
532 specific types of objects passed.
533
5342002-09-04 Martin Sjögren <martin@strakt.com>
535
536 * src/crypto/crypto.c: Added an explicit type check in the dump_*
537 functions, so that they won't die when e.g. None is passed in.
538
5392002-08-25 Martin Sjögren <martin@strakt.com>
540
541 * doc/pyOpenSSL.tex: Docs for PKCS12.
542
5432002-08-24 Martin Sjögren <martin@strakt.com>
544
545 * src/crypto: Added basic PKCS12 support, thanks to Mark Welch
546 <mark@collab.net>
547
5482002-08-16 Martin Sjögren <martin@strakt.com>
549
550 * D'oh! Fixes for python 1.5 and python 2.1.
551
5522002-08-15 Martin Sjögren <martin@strakt.com>
553
554 * Version 0.5. Yay!
555
5562002-07-25 Martin Sjögren <martin@strakt.com>
557
558 * src/ssl/context.c: Added set_options method.
559 * src/ssl/ssl.c: Added constants for Context.set_options method.
560
5612002-07-23 Martin Sjögren <martin@strakt.com>
562
563 * Updated docs
564 * src/ssl/connection.c: Changed the get_cipher_list method to actually
565 return a list! WARNING: This change makes the API incompatible with
566 earlier versions!
567
5682002-07-15 Martin Sjögren <martin@strakt.com>
569
570 * src/ssl/connection.[ch]: Removed the fileno method, it uses the
571 transport object's fileno instead.
572
5732002-07-09 Martin Sjögren <martin@strakt.com>
574
575 * src/crypto/x509.c src/crypto/x509name.c: Fixed segfault bug where
576 you used an X509Name after its X509 had been destroyed.
577 * src/crypto/crypto.[ch] src/crypto/x509req.c src/crypto/x509ext.[ch]:
578 Added X509 Extension support. Thanks to maas-Maarten Zeeman
579 <maas@awanim.com>
580 * src/crypto/pkey.c: Added bits() and type() methods.
581
5822002-07-08 Martin Sjögren <martin@strakt.com>
583
584 * src/ssl/connection.c: Moved the contents of setup_ssl into the
585 constructor, thereby fixing some segfault bugs :)
586 * src/ssl/connection.c: Added connect_ex and sendall methods.
587 * src/crypto/x509name.c: Cleaned up comparisons and NID lookup.
588 Thank you Maas-Maarten Zeeman <maas@awanim.com>
589 * src/rand/rand.c: Fix RAND_screen import.
590 * src/crypto/crypto.c src/crypto/pkcs7.[ch]: Added PKCS7 management,
591 courtesy of Maas-Maarten Zeeman <maas@awanim.com>
592 * src/crypto/x509req.c: Added verify method.
593
5942002-06-17 Martin Sjögren <martin@strakt.com>
595
596 * rpm/, setup.cfg: Added improved RPM-building stuff, thanks to
597 Mihai Ibanescu <misa@redhat.com>
598
5992002-06-14 Martin Sjögren <martin@strakt.com>
600
601 * examples/proxy.py: Example code for using OpenSSL through a proxy
602 contributed by Mihai Ibanescu <misa@redhat.com>
603 * Updated installation instruction and added them to the TeX manual.
604
6052002-06-13 Martin Sjögren <martin@strakt.com>
606
607 * src/ssl/context.c: Changed global_verify_callback so that it uses
608 PyObject_IsTrue instead of requring ints.
609 * Added pymemcompat.h to make the memory management uniform and
610 backwards-compatible.
611 * src/util.h: Added conditional definition of PyModule_AddObject and
612 PyModule_AddIntConstant
613 * src/ssl/connection.c: Socket methods are no longer explicitly
614 wrapped. fileno() is the only method the transport layer object HAS
615 to support, but if you want to use connect, accept or sock_shutdown,
616 then the transport layer object has to supply connect, accept
617 and shutdown respectively.
618
6192002-06-12 Martin Sjögren <martin@strakt.com>
620
621 * Changed comments to docstrings that are visible in Python.
622 * src/ssl/connection.c: Added set_connect_state and set_accept_state
623 methods. Thanks to Mark Welch <mark@collab.net> for this.
624
6252002-06-11 Martin Sjögren <martin@strakt.com>
626
627 * src/ssl/connection.c: accept and connect now use SSL_set_accept_state
628 and SSL_set_connect_state respectively, instead of SSL_accept and
629 SSL_connect.
630 * src/ssl/connection.c: Added want_read and want_write methods.
631
6322002-06-05 Martin Sjögren <martin@strakt.com>
633
634 * src/ssl/connection.c: Added error messages for windows. The code is
635 copied from Python's socketmodule.c. Ick.
636 * src/ssl/connection.c: Changed the parameters to the SysCallError. It
637 always has a tuple (number, string) now, even though the number
638 might not always be useful.
639
6402002-04-05 Martin Sjögren <md9ms@mdstud.chalmers.se>
641
642 * Worked more on the Debian packaging, hopefully the packages
643 are getting into the main Debian archive soon.
644
6452002-01-10 Martin Sjögren <martin@strakt.com>
646
647 * Worked some more on the Debian packaging, it's turning out real
648 nice.
649 * Changed format on this file, I'm going to try to be a bit more
650 verbose about my changes, and this format makes it easier.
651
6522002-01-08 Martin Sjögren <martin@strakt.com>
653
654 * Version 0.4.1
655 * Added some example code
656 * Added the thread safe Connection object in the 'tsafe' submodule
657 * New Debian packaging
658
6592001-08-09 Martin Sjögren <martin@strakt.com>
660
661 * Version 0.4
662 * Added a compare function for X509Name structures.
663 * Moved the submodules to separate .so files, with tiny C APIs so they
664 can communicate
665 * Skeletal OpenSSL/__init__.py
666 * Removed the err submodule, use crypto.Error and SSL.Error instead
667
6682001-08-06 Martin Sjögren <martin@strakt.com>
669
670 * Version 0.3
671 * Added more types for dealing with certificates (X509Store, X509Req,
672 PKey)
673 * Functionality to load private keys, certificates and certificate
674 requests from memory buffers, and store them too
675 * X509 and X509Name objects can now be modified as well, very neat when
676 creating certificates ;)
677 * Added SSL_MODE_AUTO_RETRY to smooth things for blocking sockets
678 * Added a sock_shutdown() method to the Connection type
679 * I don't understand why, but I can't use Py_InitModule() to create
680 submodules in Python 2.0, the interpreter segfaults on the cleanup
681 process when I do. I added a conditional compile on the version
682 number, falling back to my own routine. It would of course be nice to
683 investigate what is happening, but I don't have the time to do so
684 * Do INCREF on the type objects before inserting them in the
685 dictionary, so they will never reach refcount 0 (they are, after all,
686 statically allocated)
687
6882001-07-30 Martin Sjögren <martin@strakt.com>
689
690 * Version 0.2
691 * Lots of tweaking and comments in the code
692 * Now uses distutils instead of the stupid Setup file
693 * Hacked doc/tools/mkhowto, html generation should now work
694
6952001-07-16 Martin Sjögren <martin@strakt.com>
696
697 * Initial release (0.1, don't expect much from this one :-)
698