The olso_utils library already contains a constant_time_compare
function and the Anchor version is nearly identical. Might as
well use the global util rather than have a copy of its own.
Change-Id: Iaf02c20560ca244d244a88127996139f8abcce9b
Webob is already included in pecan, but since we import it explicitly,
it should be present in the requirements too.
Change-Id: I3d74025eb71784d6d9f1dcc07ec7e51eb28f1fc5
Add the support for actually sending the audit messages, or logging them
using the standard logging mechanisms.
Change-Id: I98067da8db4987f9f9859a8c6d5443a94677f856
Instead of relying on openssl code for certificate parsing, use the
ASN.1 representation directly. All previous features are supported. Not
all the extensions are full parsed yet, but the code doesn't require
them for now.
The code makes accessing and modifying the certificate structure simpler
and requires less error checking than the original version. The code
leaves few TODOs, but nothing that destroys previous behaviour.
It still uses the cryptography.io backend for loading keys and producing
signatures for the certificates.
Implements: blueprint direct-asn1
Change-Id: Ic555d3d056ca8da7016e2d8b434506cf214d06a1
Python-ldap is a binary module and it's not compatible with python3.
This change speeds up the installation (less compilation), removes
the version restriction and removes the ldap/sasl package dependencies.
Change-Id: Ifbea1e79c12091c4e8e8478ed5cbe9d66d854d2c
Use the actual type returned from openssl - ASN1_TIME.
Also, the test itself was incorrect. set_not_...() tests are fixed to
test UTC-based values now and not convert to local timezone.
Cryptography >= 0.9.1 needs to be used due to incompatible interface
changes.
Change-Id: I520e42e5a985f47e9fe8505f9023b8b1d05665b5
lhinds