Felix Fontein
c8a15b9dbc
crypto modules: use module_utils.compat.ipaddress when possible ( #55278 )
...
* Use module_utils.compat.ipaddress where possible.
* Simplify reverse pointer computation.
* Use dummy for unused variables.
* Remove from ignore list.
* Adjust fix.
* Fix text handling for Python 2.
* Add changelog.
2019-04-18 15:36:53 +01:00
Felix Fontein
c411883618
openssl_* module_utils/crypto.py: add full list of OIDs known to current OpenSSL ( #54943 )
...
* Add full list of OIDs known to current OpenSSL.
* Remove hardcoded OIDs.
* UID -> x500UniqueIdentifier
* Reference actual version used.
* Don't normalize to lower-case.
* Change test back.
* Fix typo.
* Apply changes suggested by RedHat legal.
2019-04-10 12:46:10 +01:00
Felix Fontein
7a16703dff
Add openssl_privatekey_info module ( #54845 )
...
* Add openssl_privatekey_info module.
* Addressing review feedback.
* Update docs.
* Update tests.
* Work around too broad sanity checks.
* ...
* Don't die when None is returned.
* Use OpenSSL to extract RSA and DSA key data.
* Extend tests.
* Make OpenSSL code compatible to OpenSSL < 1.1.
* Rewrite tests to use result dicts instead of result lists.
* Skip ECC for too old PyOpenSSL.
* Reformulate.
* Improve return_private_key_data docs.
* Rename path_content -> content.
* Add sample.
* Cleanup.
* Add key consistency check.
* Improve description.
* Adjust minimal version.
* Fallback code for some pyOpenSSL < 16.0 versions.
* Also support Ed25519 and Ed448 keys (or not).
* Add more consistency checks.
* Verify DSA keys manually.
* Improve DSA key validation.
* Forgot one condition.
* Make validation more robust.
* Move generic arithmetic code to module_utils/crypto.py.
2019-04-08 10:07:56 +02:00
Felix Fontein
c5991b970f
openssl_certificate_info, openssl_csr: fix wrong exception, and little refactoring ( #54922 )
...
* Fix wrong exception name.
* Use crypto_utils.load_certificate_request() to load CSRs with both backends.
2019-04-05 16:18:30 -04:00
Felix Fontein
65d7f0d17b
Add openssl_certificate_info module ( #54709 )
...
* Add certificate_info module.
* Improve normalization.
* Add extension dump.
* Add support for basic_constraints and ocsp_must_staple.
* Update docs.
* Add serial number.
* Remove superfluous code.
* Fix formulation.
* Improve examples.
* Improve result docs.
* Forgot to add tests.
* Adjust when no fingerprints can be computed.
2019-04-05 15:47:05 +01:00
