e050fe91a3
Allow using cryptography certs and keys in the standalone plugin ( #10133 )
...
Co-authored-by: Brad Warren <bmw@users.noreply.github.com >
2025-01-16 22:16:45 +00:00
Alex Gaynor and GitHub
9148acd332
Migrate verify_cert to take cryptography certificates ( #10120 )
2025-01-07 17:46:31 +00:00
Alex Gaynor and GitHub
4004589cbf
Migrate certbot-compatibility-test to cryptography (as much as possible ( #10117 )
...
Also fixed a typing error.
2025-01-06 13:39:16 -08:00
Alex Gaynor and GitHub
8f7c3756b3
Migrate get_serial_from_cert and valid_privkey to cryptography ( #10116 )
2025-01-06 13:34:57 -08:00
Alex Gaynor and GitHub
6ea5da51e0
Simplify typing for a local variable ( #10113 )
...
`_DefaultCertSelection` _is_ a `Callable` of the appropriate signature.
Also fixed a mypy error I see locally, `TOKEN_SIZE` should be an
integer.
2025-01-06 13:18:28 -08:00
Alex Gaynor and GitHub
1ac05ae891
Remove _pyopenssl_cert_or_req_san_ip which is unused, and migrate _pyopenssl_cert_or_req_all_names to cryptography ( #10112 )
...
Unfortunately the other helpers from this family are directly called by
(historic) versions of certbot, and so cannot be easily removed.
2025-01-06 12:46:23 -08:00
Alex Gaynor and GitHub
5dd898f56b
Move _get_names_from_subject_and_extensions to acme's crypto_utils ( #10111 )
...
Make use of it in more places
2025-01-03 16:21:31 -08:00
Alex Gaynor and GitHub
a1fce6b398
Convert notBefore and notAfter to use cryptography's APIs ( #10103 )
2025-01-03 13:50:33 -08:00
Alex Gaynor
0f36d0c1ba
Convert several SAN handling functions to use cryptography's APIs
2025-01-02 14:25:17 -05:00
Alex Gaynor
619da0432a
Introduce a Format enum to help us migrate away from pyOpenSSL's constants
...
Begin using it in `dump_pyopenssl_chain`
2024-12-21 11:06:43 -05:00
Alex Gaynor and GitHub
314838eb81
Convert some certbot-ci utilities to use cryptography's APIs ( #10102 )
2024-12-19 19:37:09 +00:00
Alex Gaynor and GitHub
0f500e8010
Convert crypto_util_test.py to use cryptography's APIs ( #10100 )
2024-12-19 10:24:16 -08:00
Alex Gaynor and GitHub
1afae838bb
Convert validate_key_csr to use cryptography's APIs ( #10099 )
2024-12-19 07:11:47 -08:00
724be8848a
Convert http01_example.py to use cryptography's APIs ( #10098 )
...
Co-authored-by: ohemorange <ebportnoy@gmail.com >
2024-12-18 23:54:44 +00:00
Alex Gaynor and GitHub
06ea141ca9
Convert make_key to use cryptography's APIs ( #10091 )
2024-12-18 15:10:20 -08:00
Alex Gaynor and GitHub
9be070414f
Convert valid_csr and csr_matches_pubkey to use cryptography's APIs ( #10088 )
2024-12-17 09:22:22 -08:00
Alex Gaynor and GitHub
b16c64a05b
Convert make_csr to use cryptography instead of pyOpenSSL ( #10086 )
...
These pyOpenSSL APIs are deprecated and we'd like to remove them.
2024-12-16 11:00:52 -08:00
Alex Gaynor and GitHub
ae6268ea3c
Remove workaround that's not relevant since py2 isn't supported ( #9716 )
2023-06-11 06:44:58 +10:00
Alex Gaynor
4c8f5fff8c
Fixed formatting of code blocks
2016-01-21 11:37:32 -05:00
Alex Gaynor
5376c30745
Revert changes to the acme directory
...
Only send the Python version in the user agent for the letsencrypt tool.
2016-01-05 07:30:49 -05:00
Alex Gaynor
0454031cce
Fixed a pair of typos in docstrings
2016-01-03 14:37:08 -05:00
Alex Gaynor
dc3a2da9b1
Fixed a typo in a comment
2016-01-03 10:49:50 -05:00
Alex Gaynor
e5247ced5e
Include the python version being used in the user agent for ACME requests.
2015-12-23 18:32:20 -05:00
Alex Gaynor
d983429f82
Fixed a type in a docstring
2015-12-12 16:12:10 -05:00
Alex Gaynor
916a946bcd
Simplify the ACME example client by using an existing method
2015-12-12 14:50:26 -05:00
Alex Gaynor
f5fde98ab6
Fixed an inaccurate comment
...
While it's true that older Pythons do not do (critical) TLS validation by default, that's not what this warning is about.
2015-12-12 14:38:21 -05:00
Alex Gaynor
6011453a14
Replaced tabs with spaces and removed usage of several deprecated features:
...
* dict.has_key -> `in` operator
* backticks -> repr
Also removed trailing newlines from a few files.
flake8 --select='W' no longer reports any issues
2014-11-18 17:01:31 -08:00
Alex Gaynor
0b75c5194f
Removed trailing whitespace as well as unused imports
2014-11-18 16:41:13 -08:00
Alex Gaynor
bcda03d948
Set the content-type header and use POST, which the ACME spec requires
2014-11-18 09:15:36 -08:00
Alex Gaynor
a9e0028007
Use the older requests API
2014-11-18 09:09:56 -08:00
Alex Gaynor
efaec60e6b
Switched from using urllib2 to requests.
...
urllib2 is a security hazzard, it does not perform certificate checks against a trust root by default, nor does it perform service_identity checks.
Also, requests has a prettier API.
2014-11-18 08:13:06 -08:00
Alex Gaynor
00aae545ac
Fixed several typos
2014-11-18 07:55:39 -08:00
