Mailman 3 September 2017 - Cryptography-dev

Signing a Certificate with AuthorityKeyIdentifier Extension
by Julian Meyer Sept. 30, 2017

Sept. 30, 2017

Hi, I woud like to sign a certificate with my internal intermediate (CA) certificate and add the AuthorityKeyIdentifier Extension with authority_cert_issuer and authority_cert_serial_number. Only key_identifier work, but with authority_cert_issuer and authority_cert_serial_number I get this error: authority_cert_issuer must be a list of GeneralName objects I try to use the subject of the public certificate of my intermediate certificate. The Code looks like this: builder = builder.add_extension( x509.AuthorityKeyIdentifier( x509.AuthorityKeyIdentifier.from_issuer_public_key(caCert.cert.public_key()), caCert.cert.subject, caCert.cert.serial, ), critical=False, ) In caCert.cert I have loaded the public certificate of my Intermediate CA. In caCert.key is my private key, witch I use to sign it. How can I generate authority_cert_issuer and authority_cert_serial_number from the CAs public certificate? I`m just a hoby programmer and not a pro, so it would be very nice, if someone can help me with this issue. Kind regards Julian

2 1

FIPS cffi bindings
by Scott Sturdivant Sept. 26, 2017

Sept. 26, 2017

Hi, Would the cryptography dev team be accepting of a patch that added binding support for the OpenSSL FIPS_mode, FIPS_mode_set, and FIPS_selftest functions? Reading Alex's thoughts on the matter ( https://bugs.python.org/issue27592#msg271008), my guess is "probably not." Assuming that a patch would not be accepted, is there a way to somehow build these bindings without requiring a fork of the project? Would there be a way for my library to specify some build arguments to cryptography? The src/_cffi_src/openssl/crypto.py CUSTOMIZATIONS variable seems like a good place for this to go, but I cannot see how to modify it during the build process. Thanks for the guidance, Scott

2 1

Cryptography error when running a script.
by Kumar, Anil Sept. 26, 2017

Sept. 26, 2017

Hi I am getting an error when running a script in production. Here are the details. # Session Timeout Enabled on linux /usr/lib64/python2.6/site-packages/cryptography/__init__.py:26: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of cryptography will drop support for Python 2.6 DeprecationWarning No handlers could be found for logger "paramiko.transport" coherent_path_default_score coherent_path_default_score failed with exception Blue Uranium is our dev box which is working fine. Blue Neon is our Production Box where were are getting the above error. Can you please let me know if this issue is related to a version change? Thanks Anil Blue Uranium # This file is dual licensed under the terms of the Apache License, Version # 2.0, and the BSD License. See the LICENSE file in the root of this repository # for complete details. from __future__ import absolute_import, division, print_function __all__ = [ "__title__", "__summary__", "__uri__", "__version__", "__author__", "__email__", "__license__", "__copyright__", ] __title__ = "cryptography" __summary__ = ("cryptography is a package which provides cryptographic recipes" " and primitives to Python developers.") __uri__ = "https://github.com/pyca/cryptography" __version__ = "2.0.3" __author__ = "The cryptography developers" __email__ = "cryptography-dev(a)python.org<mailto:cryptography-dev@python.org>" __license__ = "BSD or Apache License, Version 2.0" __copyright__ = "Copyright 2013-2017 {0}".format(__author__) Blue Neon # This file is dual licensed under the terms of the Apache License, Version # 2.0, and the BSD License. See the LICENSE file in the root of this repository # for complete details. from __future__ import absolute_import, division, print_function __all__ = [ "__title__", "__summary__", "__uri__", "__version__", "__author__", "__email__", "__license__", "__copyright__", ] __title__ = "cryptography" __summary__ = ("cryptography is a package which provides cryptographic recipes" " and primitives to Python developers.") __uri__ = "https://github.com/pyca/cryptography" __version__ = "1.4" __author__ = "The cryptography developers" __email__ = "cryptography-dev(a)python.org<mailto:cryptography-dev@python.org>" __license__ = "BSD or Apache License, Version 2.0" __copyright__ = "Copyright 2013-2016 {0}".format(__author__)

2 1

not_valid_before and not_valid_after as GeneralizedTime
by Fellipe Theophilo Sept. 19, 2017

Sept. 19, 2017

Hi everyone, I need to generate an attribute certificate according to Government's specification law about students identification card that must have not_valid_before and not_valid_after set in GeneralizedTime instead of UTCTime(datetime.datetime object). Is it possible to do it? Actually, I tried this: *from pyasn1.type.useful import GeneralizedTime* *.not_valid_before(GeneralizedTime('20170101000100Z').asDateTime).not_valid_after(GeneralizedTime('20180331235900Z').asDateTime)* But the time still appear in UTCTime. Please help ----- Fellipe

2 1

Raw ECDSA keypairs?
by John Pacific Sept. 15, 2017

Sept. 15, 2017

Hey there! Is there a good way to generate an ECDSA keypair and get the raw bytes of those keys?

2 4

Failed: Cryptography (b522324c)
by Read the Docs Sept. 15, 2017

Sept. 15, 2017

Build Failed for Cryptography (latest) You can find out more about this failure here: https://readthedocs.org/projects/cryptography/builds/5980357/ If you have questions, a good place to start is the FAQ: https://docs.readthedocs.org/en/latest/faq.html Keep documenting, Read the Docs -- http://readthedocs.org

1 0

pyOpenSSL 17.3.0 released
by Paul Kehrer Sept. 14, 2017

Sept. 14, 2017

pyOpenSSL 17.3.0 has been released. Changelog: Backward-incompatible changes: Dropped support for Python 3.3. #677 Removed the deprecated OpenSSL.rand module. This is being done ahead of our normal deprecation schedule due to its lack of use and the fact that it was becoming a maintenance burden. os.urandom() should be used instead. #675 Deprecations: Deprecated OpenSSL.tsafe. #673 Changes: Fixed a memory leak in OpenSSL.crypto.CRL. #690 Fixed a memory leak when verifying certificates with OpenSSL.crypto.X509StoreContext. #691

1 0

Failed: Cryptography (latest)
by Read the Docs Sept. 8, 2017

Sept. 8, 2017

Build Failed for Cryptography (latest) You can find out more about this failure here: https://readthedocs.org/projects/cryptography/builds/5951653/ If you have questions, a good place to start is the FAQ: https://docs.readthedocs.org/en/latest/faq.html Keep documenting, Read the Docs -- http://readthedocs.org

1 0