acertmgr

acertmgr copied to clipboard

https://cryptography.io/en/latest/hazmat/primitives/asymmetric/rsa/ search this page for "PKCS1v15" https://people.redhat.com/~hkario/marvin/ https://github.com/moepman/acertmgr/blob/master/acertmgr/tools.py#L346C31-L346C49

socketpair

RFC 6960 updates OCSP validation algorithm to SHA256

1

[cryptography.io](https://cryptography.io/en/latest/x509/ocsp/#cryptography.x509.ocsp.OCSPRequestBuilder.build) states > SHA256 is in this example because while RFC 5019 originally > required SHA1 RFC 6960 updates that to SHA256. > However, depending on your requirements you may...

Sprinterfreak

README lacks installation section

1

The README currently is lacking an installation section. It should contain at least setup via pip and manual installation with setup.py.

moepman

Implement externalAccountBinding

1

Some CAs may require it to map an account key to some internal account. Implementation is described in RFC8555#7.3.4 and should be done for API v2.

Kishi85

Refactor handling of idna domain names

9

This series of commits reworks how translation to IDNA domain names is done. It differs in functionality in only two points: a) the idna module is no longer optional b)...

davidklaftenegger

replace outdated interface

1

cryptography-42.0.0 introduces new interfaces to query certificate lifetime. The only difference is that the UTC timezone is set in the datetime object, instead of the timezone being undefined. However, the...

davidklaftenegger

fix(convert_pem_str_to_cert): always return the first cert

1

All usages of it expect it to return a single cert, so if the files contain multiple certs it crashes the program anyway.

jimethn