summaryrefslogtreecommitdiffstats
path: root/Modules/_ssl.c
Commit message (Collapse)AuthorAgeFilesLines
* Issue #27691: Fix ssl module's parsing of GEN_RID subject alternative name ↵Christian Heimes2016-09-061-1/+34
| | | | fields in X.509 certs.
* Issue #26470: Use short name rather than name for compression name to fix ↵Christian Heimes2016-09-051-6/+1
| | | | #27958.
* Issue #26470: Port ssl and hashlib module to OpenSSL 1.1.0.Christian Heimes2016-09-051-45/+136
|
* fix corner cases in the management of server_hostname (closes #27773)Benjamin Peterson2016-08-161-6/+4
|
* socket: use INVALID_SOCKETVictor Stinner2016-07-221-2/+6
| | | | | | | | * Replace "fd = -1" with "fd = INVALID_SOCKET" * Replace "fd < 0" with "fd == INVALID_SOCKET": SOCKET_T is unsigned on Windows Bug found by Pavel Belikov ("Fragment N1"): http://www.viva64.com/en/b/0414/#ID0ECDAE
* Issue #23804: Fix SSL zero-length recv() calls to not block and raise EOFMartin Panter2016-07-111-0/+8
|
* Issue #27332: Fixed the type of the first argument of module-level functionsSerhiy Storchaka2016-07-071-22/+22
| | | | generated by Argument Clinic. Patch by Petr Viktorin.
* assume egd unless OPENSSL_NO_EGD is defined—remove configure check (closes ↵Benjamin Peterson2016-07-071-2/+2
| | | | #24557)
* Fix unused variable 'libver' warning in Modules/_ssl.cBerker Peksag2016-04-141-0/+2
| | | | | | | | | It can be seen on various buildbots like 3.x.cea-indiana-amd64 and 3.x.murray-snowleopard: /export/home/buildbot/64bits/3.x.cea-indiana-amd64/build/Modules/_ssl.c:2227: warning: unused variable 'libver' /Users/buildbot/buildarea/3.x.murray-snowleopard/build/Modules/_ssl.c:2227: warning: unused variable ‘libver’
* Issue #26200: Added Py_SETREF and replaced Py_XSETREF with Py_SETREFSerhiy Storchaka2016-04-101-1/+1
| | | | in places where Py_DECREF was used.
* Issue #22570: Renamed Py_SETREF to Py_XSETREF.Serhiy Storchaka2016-04-061-2/+2
|
* Issue #26644: Raise ValueError for negative SSLSocket.recv() and read()Martin Panter2016-03-271-0/+5
|
* merge 3.4 (closes #25939)Benjamin Peterson2016-02-181-2/+6
|\
| * open the cert store readonlyBenjamin Peterson2016-02-181-2/+6
| | | | | | | | Patch from Chi Hsuan Yen.
* | enable SSL_MODE_RELEASE_BUFFERSBenjamin Peterson2016-01-081-0/+17
| | | | | | | | Patch by Cory Benfield.
* | Issue #20440: Massive replacing unsafe attribute setting code with specialSerhiy Storchaka2015-12-241-4/+2
| | | | | | | | macro Py_SETREF.
* | merge 3.4 (#25578)Benjamin Peterson2015-11-141-2/+5
|\ \ | |/
| * rm trailing wsBenjamin Peterson2015-11-141-1/+1
| |
| * fix possible memory lea k in _get_aia_uri (closes #25578)Benjamin Peterson2015-11-141-1/+4
| |
* | merge 3.4 (#25569)Benjamin Peterson2015-11-141-1/+1
|\ \ | |/
| * fix build with older openssl (#25569)Benjamin Peterson2015-11-141-1/+1
| |
* | merge 3.4 (#25530)Benjamin Peterson2015-11-121-0/+2
|\ \ | |/
| * always set OP_NO_SSLv3 by default (closes #25530)Benjamin Peterson2015-11-121-0/+2
| |
* | merge 3.5 (#25569)Benjamin Peterson2015-11-121-28/+24
|\ \ | |/
| * fix memory leak in _get_crl_dp (closes #25569)Benjamin Peterson2015-11-121-28/+24
| | | | | | | | Patch started by Stéphane Wirtel.
* | Issue #25523: Further a-to-an corrections new in 3.5.Serhiy Storchaka2015-11-021-1/+1
| |
* | Issue #25523: Merge a-to-an corrections from 3.4.Serhiy Storchaka2015-11-021-1/+1
|\ \ | |/
| * Issue #25523: Further a-to-an corrections.Serhiy Storchaka2015-11-021-1/+1
| |
* | detect alpn by feature flag not openssl version (closes #23329)Benjamin Peterson2015-09-271-2/+1
| |
* | merge 3.4 (#24655)Benjamin Peterson2015-07-181-7/+7
|\ \ | |/
| * improve style of the convert macro (#24655)Benjamin Peterson2015-07-181-7/+7
| | | | | | | | Patch by Brian Cain.
* | Issue #24001: Argument Clinic converters now use accept={type}Larry Hastings2015-05-041-4/+4
| | | | | | | | instead of types={'type'} to specify the types the converter accepts.
* | Issue #20179: Converted the _ssl module to Argument Clinic.Serhiy Storchaka2015-05-031-479/+541
| |
* | Issue #23853: Methods of SSL socket don't reset the socket timeout anymore eachVictor Stinner2015-04-061-17/+65
| | | | | | | | | | | | | | | | time bytes are received or sent. The socket timeout is now the maximum total duration of the method. This change fixes a denial of service if the application is regulary interrupted by a signal and the signal handler does not raise an exception.
* | merge 3.4 (#23875)Benjamin Peterson2015-04-061-2/+2
|\ \ | |/
| * remove extra arguments in arg parsing format codes (closes #23875)Benjamin Peterson2015-04-061-2/+2
| |
* | Issue #23853: Cleanup _ssl.cVictor Stinner2015-04-021-45/+50
| | | | | | | | | | | | * Rename check_socket_and_wait_for_timeout() to PySSL_select() * PySSL_select() is now clearly splitted betwen poll() and select() * Add empty lines for readability
* | Issue #22117: Replace usage of _PyTime_ROUND_UP with _PyTime_ROUND_CEILINGVictor Stinner2015-03-301-2/+2
| | | | | | | | | | All these functions only accept positive timeouts, so this change has no effect in practice.
* | Issue #22117: Fix usage of _PyTime_AsTimeval()Victor Stinner2015-03-301-3/+1
| | | | | | | | | | Add _PyTime_AsTimeval_noraise() function. Call it when it's not possible (or not useful) to raise a Python exception on overflow.
* | Issue #22117: Fix ssl to use _PyTime_t API on sock_timeoutVictor Stinner2015-03-281-11/+14
| | | | | | | | I didn't notice that the ssl module uses private attributes of socket objects.
* | Issue #23001: Few functions in modules mmap, ossaudiodev, socket, ssl, andSerhiy Storchaka2015-03-201-2/+6
| | | | | | | | | | codecs, that accepted only read-only bytes-like object now accept writable bytes-like object too.
* | Issue #23694: Enhance _Py_fopen(), it now raises an exception on errorVictor Stinner2015-03-181-4/+2
| | | | | | | | | | * If fopen() fails, OSError is raised with the original filename object. * The GIL is now released while calling fopen()
* | merge 3.4Benjamin Peterson2015-03-051-0/+4
|\ \ | |/
| * expose X509_V_FLAG_TRUSTED_FIRSTBenjamin Peterson2015-03-051-0/+4
| |
* | merge 3.4 (#23476)Benjamin Peterson2015-03-051-0/+9
|\ \ | |/
| * enable X509_V_FLAG_TRUSTED_FIRST when possible (closes #23476)Benjamin Peterson2015-03-051-0/+9
| |
* | Issue #23576: Avoid stalling in SSL reads when EOF has been reached in the ↵Antoine Pitrou2015-03-041-20/+0
|\ \ | |/ | | | | SSL layer but the underlying connection hasn't been closed.
| * Issue #23576: Avoid stalling in SSL reads when EOF has been reached in the ↵Antoine Pitrou2015-03-041-20/+0
| | | | | | | | SSL layer but the underlying connection hasn't been closed.
* | Issue #23446: Use PyMem_New instead of PyMem_Malloc to avoid possible integerSerhiy Storchaka2015-02-161-3/+4
|\ \ | |/ | | | | overflows. Added few missed PyErr_NoMemory().
| * Issue #23446: Use PyMem_New instead of PyMem_Malloc to avoid possible integerSerhiy Storchaka2015-02-161-3/+4
| | | | | | | | overflows. Added few missed PyErr_NoMemory().