Cryptography-dev

Download

cryptography-dev@python.org

July 2021

3 participants
2 discussions

X509_STORE_set_purpose() missing
by Dirk-Willem van Gulik July 31, 2021

July 31, 2021

Could it be that somehow in (in the latest build) - X509_STORE_set_purpose and associated #defines are missing ? In below - things work fine up until lib.X509_STORE_set_purpose() - but that calls gives me a: AttributeError: cffi library '_openssl' has no function, constant or global variable named 'X509_STORE_set_purpose' With kind regards, Dw # Create the pkcs7 object pkcs7_object = lib.d2i_PKCS7_bio(bio.bio, ffi.NULL) # We're not passing any untrusted certificates, the chain should # complete, up to, but not including the CA cert, in the CMS package. # other = lib.sk_X509_new_null() binding._openssl_assert(lib, other != ffi.NULL) # We are prividing exactly one certificate - that of the certificate # authority - as trusted. It has to be signed by this national root. # store = lib.X509_STORE_new() lib.X509_STORE_add_cert(store, certificate._x509) # type: ignore # As we're using certifcates somewhat off-label; we need to relax # the purpose verification. This is the equivalent of the -purpose any # flag in: # openssl smime -verify -inform DER -content payload.raw \ # -CAfile ca.pem -in signature.p7 -purpose any lib.X509_STORE_set_purpose(store, 7) # X509_PURPOSE_ANY

2 2

Problems with codecov & doc8
by Krzysztof Jackiewicz/Security (PLT ) /SRPOL/Engineer/삼성전자 July 30, 2021

July 30, 2021

Hi, Project codecov and doc8 checks for my recent PR (https://github.com/pyca/cryptography/pull/6181) have failed and I can't find the way to make them pass. IMHO the codecov fail is unrelated to the PR. It looks like a problem with testing environment. I ran pytest with coverage report before and after my changes and the coverage ratio was unchanged. Is it possible to reproduce the codecov check locally somehow? The doc8 check fails because of too long line in CHANGELOG.rst but the line was not changed in the PR. I noticed that doc8 complains only if the offending line is not the last one on the list. I could trick it by putting the KBKDFCMAC entry before the offending line but I don't think it's the way to go. Please advise, Thanks -- Krzysiek

3 2