pyopenssl

pyopenssl copied to clipboard

add support for Context.set_cert_store

1

reaperhulk

Missing export of `OpenSSL.SSL.FILETYPE_ASN1`

1

There is a mismatch between documentation of `OpenSSL.SSL` and the real behavior. # Steps to reproduce: 1. install pyopenssl 2. open a python shell 3. In the shell, execute: `import...

ChristianStadelmann

as its written in the following link: https://github.com/pyca/pyopenssl/blob/2d94946a938878ea10da479b7ac83ab1c434df4d/tests/test_ssl.py#LL3401C9-L3401C51 that test should represent "full renegotiation cycle" but instead of that it ends up on calling openssl bindings (renegotiation and handshake), and...

BillyGLW

Writing some tests, and it's a bit annoying to not be able to inspect the info callback. It would be nice to have this method wrapped and exposed.

glyph

Expose secure renegotiation flag from TLS connection

5

Hello, This is a pull request to add support for the SSL_get_secure_renegotiation_support function from OpenSSL. Some simple test is added. Best regards

ndmalc

Add Context options for legacy renegotiation support

1

Hello, This is a pull request to add support for Context options used to support legacy renegotiation disable by default in recent OpenSSL versions. Best regards

ndmalc

[macOS] SysCallError: (32, 'EPIPE') when the server requires certs but the client does not present one

4

In pymongo we have various tests to ensure that TLS is configured correctly. One such test is when the server is configured to require a client cert but the client...

ShaneHarvey

Would be great if the possibility to configure callback function for certificate path verification was added (similar functionality currently is available for the cert validation in SSL context).

user8547

In openssl 1.1.1 docs/man3/EVP_PKEY_set1_RSA.pod (https://github.com/openssl/openssl/blob/OpenSSL_1_1_1/doc/man3/EVP_PKEY_set1_RSA.pod) The EVP_PKEY_set_alias_type(pkey, EVP_PKEY_SM2) API is possible to convert it to using SM2 algorithms After loading an ECC key. Besides, pyca/cryptography support to export `The EVP_PKEY_set_alias_type(pkey,...

hustliyilin

X.509Name.get_components() doesn't process Subject values like X.509Name.__getattr__() does with Unicode strings.

1

Hello, I recently encountered a problem when parsing X.509 certificates with Unicode in the Subject DN fields. An example of PEM cert to be parsed is (sha1=a324f399248e42e218ec40ae771bf27c4f5aea1d): -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIBczANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQGEwJVUzEW...

zeriny