Code

TLS ABC PEP draft#1

Code

Open

Lukasa wants to merge 73 commits intomasterLukasa/peps:masterfrom ssl-abc-pepLukasa/peps:ssl-abc-pepCopy head branch name to clipboard

+1,566

Commits

Commits on Oct 17, 2016

• Shell of PEP.

  Lukasa

  committed
  2978222

  Copy full SHA for 2978222

Commits on Oct 21, 2016

• Fix typo.

  Lukasa

  committed
  b7bc617

  Copy full SHA for b7bc617

Commits on Oct 28, 2016

• Define ServerContext and ClientContext.

  Lukasa

  committed
  fd9498e

  Copy full SHA for fd9498e

• Support specific TLS versions.

  Lukasa

  committed
  d867cd6

  Copy full SHA for d867cd6

• Define a type for ALPN tokens.

  Lukasa

  committed
  a7c3670

  Copy full SHA for a7c3670

• Typing, how do we do it?

  Lukasa

  committed
  b86e865

  Copy full SHA for b86e865

• Simple human-operated compression algorithm

  Lukasa

  committed
  50506a2

  Copy full SHA for 50506a2

• What about HSMs?

  Lukasa

  committed
  7db0909

  Copy full SHA for 7db0909

• Allow disabling cert validation.

  Lukasa

  committed
  b1c6ed6

  Copy full SHA for b1c6ed6

Commits on Jan 12, 2017

• Remove prohibition on throwing exceptions.

  Lukasa

  committed
  5068be3

  Copy full SHA for 5068be3

• Remove duplicate method signatures from _BaseContext.

  Lukasa

  committed
  5932e48

  Copy full SHA for 5932e48

• Client/ServerContext inherit from _BaseContext

  Lukasa

  committed
  f19c2cf

  Copy full SHA for f19c2cf

• Add unwrap() and shutdown() methods.

  Lukasa

  committed
  8f02f0e

  Copy full SHA for 8f02f0e

• Add abstract Certificate and PrivateKey classes.

  Lukasa

  committed
  9221752

  Copy full SHA for 9221752

• Fix the return type of PrivateKey constructors

  Lukasa

  committed
  31466f1

  Copy full SHA for 31466f1

Commits on Jan 13, 2017

• Split read/read_into and clarify.

  Lukasa

  committed
  8a71a81

  Copy full SHA for 8a71a81

• Stop allowing string passwords.

  Lukasa

  committed
  9f05a36

  Copy full SHA for 9f05a36

• Make NextProtocols an enum

  Lukasa

  committed
  d986d3b

  Copy full SHA for d986d3b

• Move set_sni_callback to ServerContext.

  Lukasa

  committed
  acb33cc

  Copy full SHA for acb33cc

• Add support for trust stores.

  Lukasa

  committed
  5a44e30

  Copy full SHA for 5a44e30

• Classmethods don't get self, they get cls.

  Lukasa

  committed
  d0a871b

  Copy full SHA for d0a871b

Commits on Jan 19, 2017

• Add cipher suite configuration section.

  Lukasa

  committed
  7ff2a4a

  Copy full SHA for 7ff2a4a

• Define Configuration object.

  Lukasa

  committed
  314eee4

  Copy full SHA for 314eee4

• Make the TLSConfiguration immutable.

  Lukasa

  committed
  8a2351c

  Copy full SHA for 8a2351c

• Refactor the SNI callback with Configuration.

  Lukasa

  committed
  11dbe47

  Copy full SHA for 11dbe47

• Update SChannel section.

  Lukasa

  committed
  abbabe4

  Copy full SHA for abbabe4

• All lists must become tuples.

  Lukasa

  committed
  58ba063

  Copy full SHA for 58ba063

• Make notes about hashability.

  Lukasa

  committed
  ce74bc6

  Copy full SHA for ce74bc6

Commits on Jan 20, 2017

• We don't define only abstract classes now.

  Lukasa

  committed
  71dcf7e

  Copy full SHA for 71dcf7e

• Fix some typos.

  Lukasa

  committed
  5883122

  Copy full SHA for 5883122

• server_hostname no longer has a default value

  Lukasa

  committed
  546e4c8

  Copy full SHA for 546e4c8

• Servers do accept(), not connect()

  Lukasa

  committed
  cab2797

  Copy full SHA for cab2797

• We call it readinto, not read_into.

  Lukasa

  committed
  0f605b5

  Copy full SHA for 0f605b5

Commits on Jan 22, 2017

• Note backward-compat guarantees of TLSConfiguration

  Lukasa

  committed
  066df96

  Copy full SHA for 066df96

Commits on Jan 25, 2017

• Explain we have two context classes.

  Lukasa

  committed
  d5bb4e0

  Copy full SHA for d5bb4e0

• Allow buffer objects and file objects.

  Lukasa

  committed
  b90be4d

  Copy full SHA for b90be4d

• Remove TODO section.

  Lukasa

  committed
  a6e91ad

  Copy full SHA for a6e91ad

• Define an API for runtime access to concrete classes

  Lukasa

  committed
  56407af

  Copy full SHA for 56407af

• Actually use RST markup.

  Lukasa

  committed
  1baaa46

  Copy full SHA for 1baaa46

• Slightly extend the "Future" section.

  Lukasa

  committed
  59ca356

  Copy full SHA for 59ca356

Commits on Jan 27, 2017

• Mention exception aliasing.

  Lukasa

  committed
  2b6d43e

  Copy full SHA for 2b6d43e

Commits on Feb 2, 2017

• Un-mess-up SecureTransport and SChannel.

  Lukasa

  committed
  384e9bc

  Copy full SHA for 384e9bc

• Both -> all three

  Lukasa

  committed
  7f9a057

  Copy full SHA for 7f9a057

• Note that urllib also requires amendment.

  Lukasa

  committed
  b8472bf

  Copy full SHA for b8472bf

• Fixup unbalanced parentheses

  Lukasa

  committed
  dc765ff

  Copy full SHA for dc765ff

• Fix a number of typos

  Lukasa

  committed
  b779fde

  Copy full SHA for b779fde

• Update the sni_callback docstring.

  Lukasa

  committed
  9524fe4

  Copy full SHA for 9524fe4

• Fix the TLSVersion enum

  Lukasa

  committed
  d84927c

  Copy full SHA for d84927c

• Add a note regarding the type hints.

  Lukasa

  committed
  739364b

  Copy full SHA for 739364b

• Turns out I don't know how to type declare

  Lukasa

  committed
  04c2034

  Copy full SHA for 04c2034

• Class method constructors cannot have return types

  Lukasa

  committed
  d6d7ef9

  Copy full SHA for d6d7ef9

• Explain ragged EOFs

  Lukasa

  committed
  37bd8c0

  Copy full SHA for 37bd8c0

• Typos, typos everywhere.

  Lukasa

  committed
  551bb23

  Copy full SHA for 551bb23

Commits on Feb 3, 2017

• Explain why we have no default for server_hostname

  Lukasa

  committed
  09082d0

  Copy full SHA for 09082d0

Commits on Feb 4, 2017

• Explain how NSS deals with cipher suites

  tiran

  committed
  3ddedf4

  Copy full SHA for 3ddedf4

• Merge pull request #2 from tiran/ssl-abc-nss

  Show description for bb7e19b
  Lukasa

  authored
  bb7e19b

  Copy full SHA for bb7e19b

Commits on Feb 5, 2017

• More discussion of WantRead/WantWrite error

  Lukasa

  committed
  159325b

  Copy full SHA for 159325b

• Require amt in read and readinto

  Lukasa

  committed
  4a72c04

  Copy full SHA for 4a72c04

• Remote auto_handshake.

  Lukasa

  committed
  36d2996

  Copy full SHA for 36d2996

• Add CipherSuite enum

  Show description for 12ea3df
  tiran

  committed
  12ea3df

  Copy full SHA for 12ea3df

• Note that reusing is bad.

  Lukasa

  committed
  796eaa0

  Copy full SHA for 796eaa0

• Merge pull request #3 from tiran/ciphersuites

  Show description for 25d47d4
  Lukasa

  authored
  25d47d4

  Copy full SHA for 25d47d4

Commits on Feb 6, 2017

• Explain ST to cipher enum interaction.

  Lukasa

  committed
  f95f2a7

  Copy full SHA for f95f2a7

• Turns out I don't know how auto works

  Lukasa

  committed
  5655558

  Copy full SHA for 5655558

• Accept ints as cipher suites.

  Lukasa

  committed
  a58fd09

  Copy full SHA for a58fd09

• Refactor TLSWrappedBuffer

  Lukasa

  committed
  638492a

  Copy full SHA for 638492a

Commits on Feb 9, 2017

• Missed this paragraph.

  Lukasa

  committed
  3ee7c62

  Copy full SHA for 3ee7c62

• Define the socket in terms of the buffers.

  Lukasa

  committed
  3cd8f40

  Copy full SHA for 3cd8f40

• Promote @tiran to co-author.

  Lukasa

  committed
  1f07c04

  Copy full SHA for 1f07c04

• Provide credits.

  Lukasa

  committed
  33a4514

  Copy full SHA for 33a4514

• More crediting.

  Lukasa

  committed
  8019c43

  Copy full SHA for 8019c43

Commits on Feb 13, 2017

• Add note for SChannel cipher choices.

  Lukasa

  committed
  6c14c3d

  Copy full SHA for 6c14c3d

• Cleanup PEP header

  Lukasa

  committed
  06bc39c

  Copy full SHA for 06bc39c