index.rst (146484B)
1 .. _mozilla_projects_nss_python_binding_for_nss: 2 3 Python binding for NSS 4 ====================== 5 6 .. _project_information: 7 8 `Project Information <#project_information>`__ 9 ---------------------------------------------- 10 11 .. container:: 12 13 python-nss is a Python binding for NSS (Network Security Services) and NSPR (Netscape Portable 14 Runtime). NSS provides cryptography services supporting SSL, TLS, PKI, PKIX, X509, PKCS*, etc. 15 NSS is an alternative to OpenSSL and used extensively by major software projects. NSS is FIPS-140 16 certified. 17 18 NSS is built upon NSPR because NSPR provides an abstraction of common operating system services, 19 particularly in the areas of networking and process management. Python also provides an 20 abstraction of common operating system services but because NSS and NSPR are tightly bound 21 python-nss exposes elements of NSPR. 22 23 For information on NSS and NSPR, see the following: 24 25 - :ref:`mozilla_projects_nss`. NSS project page. 26 - `Netscape Portable Runtime </docs/NSPR>`__. NSPR project page. 27 - `NSPR Reference </docs/NSPR_API_Reference>`__. NSPR API documentation. 28 29 .. _design_goals: 30 31 `Design Goals <#design_goals>`__ 32 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 33 34 .. container:: 35 36 NSS and NSPR are C language API's which python-nss "wraps" and exposes to Python programs. The 37 design of python-nss follows these basic guiding principles: 38 39 - Be a thin layer with almost a one-to-one mapping of NSS/NSPR calls to python methods and 40 functions. Programmers already familiar with NSS/NSPR will be quite comfortable with 41 python-nss. 42 - Be "Pythonic". The term Pythonic means to follow accepted Python paradigms and idoms in the 43 Python language and libraries. Thus when deciding if the NSS/NSPR API should be rigidly 44 followed or a more Pythonic API provided the Pythonic implementation wins because Python 45 programmers do not want to write C programs in Python, rather they want their Python code to 46 feel like Python code with the richness of full Python. 47 - Identifer names follow the preferred Python style instead of the style in the NSS/NSPR C 48 header files. 49 50 - Classes are camel-case. Class names always begin with a upper case letter and are then 51 followed by a mix of lower and upper case letters, a upper case letter is used to separate 52 words. Acronyms always appear as a contiguous string of upper case letters. 53 - Method, function and property names are always lower case with words separated by 54 underscores. 55 - Constants are all upper case with words separated by underscores, they match the NSS/NSPR C 56 API. 57 58 - Every module, class, function, and method has associated documentation and is exposed via the 59 standard Python methodology. This documentation is available via the numerous Python 60 documentation extraction tools. Also see the `generated HTML 61 documentation <https://mozilla.github.io/python-nss-docs/>`__ provided with each release. 62 - NSS/NSPR structs are exposed as Python objects. 63 - NSS/NSPR functions which operate on a NSS/NSPR object (i.e. struct) become methods of that 64 object. 65 - NSS/NSPR objects which are collections support the Python iteration protocol. In other words 66 they can be iterated over, indexed by position, or used as slices. 67 - NSS/NSPR objects whose collection elements can be referenced by name support associative 68 indexing. 69 - NSS/NSPR objects which have "get" and "set" API function calls are exposed as Python 70 properties. 71 - All NSS/NSPR Python objects can print their current value by evaluting the Python object in a 72 string context or by using the Python str() function. 73 - Support threading. The Python Global Interpreter Lock (GIL) is released prior to calling 74 NSS/NSPR C functions and reaquired after the NSS/NSPR C function returns. This allows other 75 Python threads to execute during the time a NSS/NSPR function is progress in another thread. 76 Also, any "global" values which are set in python-nss are actually thread-local. Examples of 77 this are the various callbacks which can be set and their parameters. Thus each thread gets it 78 own set of callbacks. 79 - Many methods/functions provide sane default (keyword) parameters freeing the Python programmer 80 from having to specify all parameters yet allowing them to be overriden when necessary. 81 - Error codes are *never* returned from methods/functions. python-nss follows the existing 82 Python exception mechanism. Any error reported by NSS/NSPR is converted into a Python 83 exception and raised. The exact error code, error description, and often contextual error 84 information will be present in the exception object. 85 - Enumerated constants used in the NSS/NSPR API's are available in the Python module under the 86 *exact* same name as they appear in the C header files of NSS/NSPR. 87 - Convenience functions are provided to translate between the numeric value of an enumerated 88 constant and it's string representation and visa versa. 89 - python-nss internally supports UTF-8. Strings may be Python str objects or Python unicode 90 objects. If a Python unicode object is passed to a NSS/NSPR function it will be encoded as 91 UTF-8 first before being passed to NSS/NSPR. 92 - python-nss tries to be flexible when generating a print representation of complex objects. For 93 simplicity you can receive a block of formatted text but if you need more control, such as 94 when building GUI elments you can access a list of "lines", each line is paired with an 95 indentation level value. The (indent, text) pairs allow you to insert the item into a GUI tree 96 structure or simply change the indentation formatting. 97 - Deprecated elements of the python-nss API are marked with Python deprecation warnings as well 98 as being documented in the nss module documentation. As of Python 2.7 deprecation warnings are 99 no longer reported by default. It is suggested Python developers using python-nss periodically 100 run their code with deprecation warnings enabled. Depercated elements will persist for a least 101 two releases before being removed from the API entirely. 102 103 .. _project_history: 104 105 `Project History <#project_history>`__ 106 -------------------------------------- 107 108 .. container:: 109 110 Red Hat utilizes both NSS and Python in many of it's projects, however it was not previously 111 possible to call NSS directly from Python. To solve this problem Red Hat generously funded the 112 initial development of python-nss as well as it's continued maintenance. Red Hat following it's 113 open source philosophy has contributed the source to the Mozilla security project. Red Hat 114 welcomes all interested contributors who would like to contribute the python-nss project as part 115 of an open source community. The initial release of python-nss occurred in September 2008 with 116 it's inclusion in the Fedora distribution. The source code to python-nss was first imported into 117 the Mozilla CVS repository on June 9th 2009. python-nss is currently available in: 118 119 - Fedora 120 - RHEL 6 121 122 The principal developer of python-nss is John Dennis jdennis@redhat.com. Additional contributors 123 are: 124 125 - Miloslav Trmač mitr@redhat.com 126 - Bohuslav Kabrda slavek@redhat.com 127 128 The python-nss binding is still young despite having been utilized in several major software 129 projects. Thus it's major version number is still at zero. This is primarily so the developers 130 can make changes to the API as experiece grows with it. For example it is already known there are 131 some naming inconsistencies. Elments of the API are probably not ideally partitioned into proper 132 namespaces via Python modules. Some functionality and interface have already been deprecated due 133 to lessons learned. Thus at some point in the future when it is felt the API has solidified and 134 been further proven in the field a 1.0 release will be made. At that point in time existing users 135 of the python-nss API will need to some elements of their code. A migration script will be 136 provided to assist them. 137 138 .. _licensing_information: 139 140 `Licensing Information <#licensing_information>`__ 141 -------------------------------------------------- 142 143 .. container:: 144 145 python-nss is available under the Mozilla Public License, the GNU General Public License, and the 146 GNU Lesser General Public License. For information on downloading python-nss releases as tar 147 files, see `Source Download <#sourcedownload>`__. 148 149 `Documentation <#documentation>`__ 150 ---------------------------------- 151 152 .. container:: 153 154 .. rubric:: python-nss API documentation 155 :name: python-nss_api_documentation 156 157 The python-nss API documentation for the current release can be viewed at `python-nss API 158 documentation <https://mozilla.github.io/python-nss-docs/>`__. 159 160 The API documentation is generated from the python-nss source code and compiled modules. You can 161 build it yourself via ``./setup.py build_doc``. Most distributions include the python-nss API 162 documentation in the python-nss packaging. Consult your distribution for more information. 163 164 .. rubric:: Example Code 165 :name: example_code 166 167 The doc/examples directory contains numerous examples of python-nss programs and libraries you 168 may wish to consult. They illustrate suggested usage and best practice. 169 170 .. rubric:: Test Code 171 :name: test_code 172 173 In addition the test directory contains unit tests that also illustrate python-nss usage, however 174 unlike the examples the unit tests are geared towards testing rather than expository 175 illustration. 176 177 .. rubric:: Other Documentation 178 :name: other_documentation 179 180 The doc directory contains other files you may wish to review. 181 182 .. _how_to_report_a_bug: 183 184 `How to Report a Bug <#how_to_report_a_bug>`__ 185 ---------------------------------------------- 186 187 .. container:: 188 189 python-nss bugs are currently being tracked in the Red Hat bugzilla system for Fedora. You can 190 enter a bug report 191 `here <https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora;component=python-nss>`__. 192 193 .. _source_download_area: 194 195 `Source Download Area <#source_download_area>`__ 196 ------------------------------------------------ 197 198 .. container:: 199 200 Source downloads are maintained 201 `here <https://ftp.mozilla.org/pub/mozilla.org/security/python-nss/releases/>`__. Links to 202 download URL for a specific release can be found in the `Release Information <#release_info>`__ 203 section. 204 205 .. _mozilla_source_code_management_(scm)_information: 206 207 `Mozilla Source Code Management (SCM) Information <#mozilla_source_code_management_(scm)_information>`__ 208 -------------------------------------------------------------------------------------------------------- 209 210 .. container:: 211 212 On March 21, 2013 the NSS project switched from using CVS as it's source code manager (SCM) to 213 Mercurial, also known as ``hg``. All prior CVS information (including release tags) were imported 214 into the new Mercurial repositories, as such there is no need to utilize the deprecated CVS 215 repositories, use Mercurial instead. 216 217 To check out python-nss source code from Mercurial do this: 218 219 ``hg clone https://hg.mozilla.org/projects/python-nss`` 220 221 The SCM tags for various python-nss releases can be found in the `Release 222 Information <#release_info>`__. 223 224 You may want to review the `Getting Mozilla Source Code Using 225 Mercurial <https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Source_Code/Mercurial>`__ 226 documentation for more information with working with Mercurial. 227 228 The old deprecated CVS documentation can be found here: `Getting Mozilla Source Code Using 229 CVS <https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Source_Code/CVS>`__. 230 231 The old deprecated python-nss CVS source code location is ``mozilla/security/python/nss``. 232 233 .. _release_information: 234 235 `Release Information <#release_information>`__ 236 ---------------------------------------------- 237 238 .. container:: 239 240 .. _release_1.0.1: 241 242 `Release 1.0.1 <#release_1.0.1>`__ 243 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 244 245 .. container:: 246 247 +-------------------------------------------------+-------------------------------------------------+ 248 | Release Date | 2017-02-28 | 249 +-------------------------------------------------+-------------------------------------------------+ 250 | SCM Tag | PYNSS_RELEASE_1_0_1 | 251 +-------------------------------------------------+-------------------------------------------------+ 252 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securi | 253 | | ty/python-nss/releases/PYNSS_RELEASE_1_0_1/src/ | 254 +-------------------------------------------------+-------------------------------------------------+ 255 | Change Log | - Add TLS 1.3 cipher suites | 256 | | - ssl_cipher_info.py now attempts to enable | 257 | | TLS 1.3 | 258 | | - Fix build issue in setup.py. python-nss can | 259 | | now be build as Python wheel, e.g. \`pip | 260 | | wheel -w dist .\` | 261 | | - The following constants were added: | 262 | | | 263 | | - ssl.TLS_AES_128_GCM_SHA256 | 264 | | - ssl.TLS_AES_256_GCM_SHA384 | 265 | | - ssl.TLS_CHACHA20_POLY1305_SHA256 | 266 +-------------------------------------------------+-------------------------------------------------+ 267 268 .. _release_1.0.0: 269 270 `Release 1.0.0 <#release_1.0.0>`__ 271 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 272 273 .. container:: 274 275 +-------------------------------------------------+-------------------------------------------------+ 276 | Release Date | 2016-09-01 | 277 +-------------------------------------------------+-------------------------------------------------+ 278 | SCM Tag | PYNSS_RELEASE_1_0_0 | 279 +-------------------------------------------------+-------------------------------------------------+ 280 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securi | 281 | | ty/python-nss/releases/PYNSS_RELEASE_1_0_0/src/ | 282 +-------------------------------------------------+-------------------------------------------------+ 283 | Change Log | Official 1.0.0 release, only minor tweaks from | 284 | | the 1.0.0beta1 release. | 285 | | | 286 | | - Allow custom include root in setup.py as | 287 | | command line arg. | 288 | | - Add TLS chacha20 poly1305 constants. | 289 | | - Remove checks for whether a socket is open | 290 | | for reading. It's not possible for the | 291 | | binding to know in all cases, especially if | 292 | | the socket is created from an xternal socket | 293 | | passed in. | 294 | | - The following module functions were added: | 295 | | | 296 | | - nss.get_all_tokens | 297 | | | 298 | | - The following constants were added: | 299 | | | 300 | | - | 301 | | ssl.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | 302 | | - ss | 303 | | l.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | 304 | | - | 305 | | ssl.TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | 306 | | - | 307 | | ssl.TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 | 308 | | - | 309 | | ssl.TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256 | 310 +-------------------------------------------------+-------------------------------------------------+ 311 312 .. _release_1.0.0beta1: 313 314 `Release 1.0.0beta1 <#release_1.0.0beta1>`__ 315 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 316 317 .. container:: 318 319 +-------------------------------------------------+-------------------------------------------------+ 320 | Release Date | 2016-02-16 | 321 +-------------------------------------------------+-------------------------------------------------+ 322 | SCM Tag | PYNSS_RELEASE_1_0_0beta1 | 323 +-------------------------------------------------+-------------------------------------------------+ 324 | Source Download | http | 325 | | s://ftp.mozilla.org/pub/mozilla.org/security/py | 326 | | thon-nss/releases/PYNSS_RELEASE_1_0_0beta1/src/ | 327 +-------------------------------------------------+-------------------------------------------------+ 328 | Change Log | The primary enhancement in this version is | 329 | | support for Python3. A single code base | 330 | | supports both Py2 (minimum version 2.7) and Py3 | 331 | | | 332 | | - When built for Py2: | 333 | | | 334 | | - text will be a Unicode object | 335 | | - binary data will be a str object | 336 | | - ints will be Python long object | 337 | | | 338 | | - When built for Py3: | 339 | | | 340 | | - text will be a str object | 341 | | - binary data will be a bytes object | 342 | | - ints will be a Python int object | 343 | | | 344 | | - All pure Python tests and examples have been | 345 | | ported to Py3 syntax but should continue to | 346 | | run under Py2. | 347 | | - The following class methods were added: | 348 | | | 349 | | - PK11Slot.check_security_officer_passwd | 350 | | - PK11Slot.check_user_passwd | 351 | | - PK11Slot.change_passwd | 352 | | - PK11Slot.init_pin | 353 +-------------------------------------------------+-------------------------------------------------+ 354 355 .. _release_0.17.0: 356 357 `Release 0.17.0 <#release_0.17.0>`__ 358 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 359 360 .. container:: 361 362 +-------------------------------------------------+-------------------------------------------------+ 363 | Release Date | 2014-11-07 | 364 +-------------------------------------------------+-------------------------------------------------+ 365 | SCM Tag | PYNSS_RELEASE_0_17_0 | 366 +-------------------------------------------------+-------------------------------------------------+ 367 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 368 | | y/python-nss/releases/PYNSS_RELEASE_0_17_0/src/ | 369 +-------------------------------------------------+-------------------------------------------------+ 370 | Change Log | The primary enhancement in this version is | 371 | | adding support for PBKDF2 | 372 | | | 373 | | - The following module functions were added: | 374 | | | 375 | | - nss.create_pbev2_algorithm_id | 376 | | | 377 | | - The following class methods were added: | 378 | | | 379 | | - nss.AlgorithmID.get_pbe_crypto_mechanism | 380 | | - nss.AlgorithmID.get_pbe_iv | 381 | | - nss.PK11Slot.pbe_key_gen | 382 | | - nss.PK11Slot.format_lines | 383 | | - nss.PK11Slot.format | 384 | | - nss.Pk11SymKey.format_lines | 385 | | - nss.Pk11SymKey.format | 386 | | - nss.SecItem.to_base64 | 387 | | - nss.SecItem.format_lines | 388 | | - nss.SecItem.format | 389 | | | 390 | | - The following files were added: | 391 | | | 392 | | - doc/examples/pbkdf2_example.py | 393 | | | 394 | | - The SecItem constructor added 'ascii' | 395 | | parameter to permit initialization from | 396 | | base64 and/or PEM textual data. | 397 +-------------------------------------------------+-------------------------------------------------+ 398 399 .. _release_0.16.0: 400 401 `Release 0.16.0 <#release_0.16.0>`__ 402 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 403 404 .. container:: 405 406 +-------------------------------------------------+-------------------------------------------------+ 407 | Release Date | 2014-10-29 | 408 +-------------------------------------------------+-------------------------------------------------+ 409 | SCM Tag | PYNSS_RELEASE_0_16_0 | 410 +-------------------------------------------------+-------------------------------------------------+ 411 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 412 | | y/python-nss/releases/PYNSS_RELEASE_0_16_0/src/ | 413 +-------------------------------------------------+-------------------------------------------------+ 414 | Change Log | The primary enhancements in this version is | 415 | | adding support for the setting trust attributes | 416 | | on a Certificate, the SSL version range API, | 417 | | information on the SSL cipher suites and | 418 | | information on the SSL connection. | 419 | | | 420 | | - The following module functions were added: | 421 | | | 422 | | - ssl.get_ssl_version_from_major_minor | 423 | | - ssl.get_default_ssl_version_range | 424 | | - ssl.get_supported_ssl_version_range | 425 | | - ssl.set_default_ssl_version_range | 426 | | - ssl.ssl_library_version_from_name | 427 | | - ssl.ssl_library_version_name | 428 | | - ssl.get_cipher_suite_info | 429 | | - ssl.ssl_cipher_suite_name | 430 | | - ssl.ssl_cipher_suite_from_name | 431 | | | 432 | | - The following deprecated module functions | 433 | | were removed: | 434 | | | 435 | | - ssl.nssinit | 436 | | - ssl.nss_ini | 437 | | - ssl.nss_shutdown | 438 | | | 439 | | - The following classes were added: | 440 | | | 441 | | - SSLCipherSuiteInfo | 442 | | - SSLChannelInfo | 443 | | | 444 | | - The following class methods were added: | 445 | | | 446 | | - Certificate.trust_flags | 447 | | - Certificate.set_trust_attributes | 448 | | - SSLSocket.set_ssl_version_range | 449 | | - SSLSocket.get_ssl_version_range | 450 | | - SSLSocket.get_ssl_channel_info | 451 | | - SSLSocket.get_negotiated_host | 452 | | - SSLSocket.connection_info_format_lines | 453 | | - SSLSocket.connection_info_format | 454 | | - SSLSocket.connection_info_str | 455 | | - SSLCipherSuiteInfo.format_lines | 456 | | - SSLCipherSuiteInfo.format | 457 | | - SSLChannelInfo.format_lines | 458 | | - SSLChannelInfo.format | 459 | | | 460 | | - The following class properties were added: | 461 | | | 462 | | - Certificate.ssl_trust_flags | 463 | | - Certificate.email_trust_flags | 464 | | - Certificate.signing_trust_flags | 465 | | - SSLCipherSuiteInfo.cipher_suite | 466 | | - SSLCipherSuiteInfo.cipher_suite_name | 467 | | - SSLCipherSuiteInfo.auth_algorithm | 468 | | - SSLCipherSuiteInfo.auth_algorithm_name | 469 | | - SSLCipherSuiteInfo.kea_type | 470 | | - SSLCipherSuiteInfo.kea_type_name | 471 | | - SSLCipherSuiteInfo.symmetric_cipher | 472 | | - SSLCipherSuiteInfo.symmetric_cipher_name | 473 | | - SSLCipherSuiteInfo.symmetric_key_bits | 474 | | - SSLCipherSuiteInfo.symmetric_key_space | 475 | | - SSLCipherSuiteInfo.effective_key_bits | 476 | | - SSLCipherSuiteInfo.mac_algorithm | 477 | | - SSLCipherSuiteInfo.mac_algorithm_name | 478 | | - SSLCipherSuiteInfo.mac_bits | 479 | | - SSLCipherSuiteInfo.is_fips | 480 | | - SSLCipherSuiteInfo.is_exportable | 481 | | - SSLCipherSuiteInfo.is_nonstandard | 482 | | - SSLChannelInfo.protocol_version | 483 | | - SSLChannelInfo.protocol_version_str | 484 | | - SSLChannelInfo.protocol_version_enum | 485 | | - SSLChannelInfo.major_protocol_version | 486 | | - SSLChannelInfo.minor_protocol_version | 487 | | - SSLChannelInfo.cipher_suite | 488 | | - SSLChannelInfo.auth_key_bits | 489 | | - SSLChannelInfo.kea_key_bits | 490 | | - SSLChannelInfo.creation_time | 491 | | - SSLChannelInfo.creation_time_utc | 492 | | - SSLChannelInfo.last_access_time | 493 | | - SSLChannelInfo.last_access_time_utc | 494 | | - SSLChannelInfo.expiration_time | 495 | | - SSLChannelInfo.expiration_time_utc | 496 | | - SSLChannelInfo.compression_method | 497 | | - SSLChannelInfo.compression_method_name | 498 | | - SSLChannelInfo.session_id | 499 | | | 500 | | - The following files were added: | 501 | | | 502 | | - doc/examples/cert_trust.py | 503 | | - doc/examples/ssl_version_range.py | 504 | | | 505 | | - The following constants were added: | 506 | | | 507 | | - nss.CERTDB_TERMINAL_RECORD | 508 | | - nss.CERTDB_VALID_PEER | 509 | | - nss.CERTDB_TRUSTED | 510 | | - nss.CERTDB_SEND_WARN | 511 | | - nss.CERTDB_VALID_CA | 512 | | - nss.CERTDB_TRUSTED_CA | 513 | | - nss.CERTDB_NS_TRUSTED_CA | 514 | | - nss.CERTDB_USER | 515 | | - nss.CERTDB_TRUSTED_CLIENT_CA | 516 | | - nss.CERTDB_GOVT_APPROVED_CA | 517 | | - ssl.SRTP_AES128_CM_HMAC_SHA1_32 | 518 | | - ssl.SRTP_AES128_CM_HMAC_SHA1_80 | 519 | | - ssl.SRTP_NULL_HMAC_SHA1_32 | 520 | | - ssl.SRTP_NULL_HMAC_SHA1_80 | 521 | | - ssl.SSL_CK_DES_192_EDE3_CBC_WITH_MD5 | 522 | | - ssl.SSL_CK_DES_64_CBC_WITH_MD5 | 523 | | - ssl.SSL_CK_IDEA_128_CBC_WITH_MD5 | 524 | | - ssl.SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5 | 525 | | - ssl.SSL_CK_RC2_128_CBC_WITH_MD5 | 526 | | - ssl.SSL_CK_RC4_128_EXPORT40_WITH_MD5 | 527 | | - ssl.SSL_CK_RC4_128_WITH_MD5 | 528 | | | 529 | | - ssl.SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA | 530 | | - ssl.SSL_FORTEZZA_DMS_WITH_NULL_SHA | 531 | | - ssl.SSL_FORTEZZA_DMS_WITH_RC4_128_SHA | 532 | | - ssl.SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA | 533 | | - ssl.SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA | 534 | | - ssl.TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA | 535 | | - ssl.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA | 536 | | - ssl.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 | 537 | | - ssl.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA | 538 | | - ssl.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA | 539 | | - ssl.TLS_DHE_DSS_WITH_DES_CBC_SHA | 540 | | - ssl.TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA | 541 | | - ssl.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA | 542 | | - ssl.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 | 543 | | - ssl.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 | 544 | | - ssl.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 | 545 | | - ssl.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA | 546 | | - ssl.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA | 547 | | - ssl.TLS_DHE_RSA_WITH_DES_CBC_SHA | 548 | | - ssl.TLS_DH_ANON_WITH_CAMELLIA_128_CBC_SHA | 549 | | - ssl.TLS_DH_ANON_WITH_CAMELLIA_256_CBC_SHA | 550 | | - ssl.TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA | 551 | | - ssl.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA | 552 | | - ssl.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA | 553 | | - ssl.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA | 554 | | - ssl.TLS_DH_DSS_WITH_DES_CBC_SHA | 555 | | - ssl.TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA | 556 | | - ssl.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA | 557 | | - ssl.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA | 558 | | - ssl.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA | 559 | | - ssl.TLS_DH_RSA_WITH_DES_CBC_SHA | 560 | | - ssl.TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA | 561 | | - ssl.TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 | 562 | | - ssl.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA | 563 | | - ssl.TLS_DH_anon_WITH_AES_128_CBC_SHA | 564 | | - ssl.TLS_DH_anon_WITH_AES_256_CBC_SHA | 565 | | - ssl.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA | 566 | | - ssl.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA | 567 | | - ssl.TLS_DH_anon_WITH_DES_CBC_SHA | 568 | | - ssl.TLS_DH_anon_WITH_RC4_128_MD5 | 569 | | | 570 | | - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 | 571 | | | 572 | | - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | 573 | | - ssl.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 | 574 | | - ssl.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | 575 | | | 576 | | - ssl.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 | 577 | | - ssl.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 | 578 | | - ssl.TLS_EMPTY_RENEGOTIATION_INFO_SCSV | 579 | | - ssl.TLS_FALLBACK_SCSV | 580 | | - ssl.TLS_NULL_WITH_NULL_NULL | 581 | | - ssl.TLS_RSA_EXPORT_WITH_DES40_CBC_SHA | 582 | | - ssl.TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 | 583 | | - ssl.TLS_RSA_EXPORT_WITH_RC4_40_MD5 | 584 | | - ssl.TLS_RSA_WITH_3DES_EDE_CBC_SHA | 585 | | - ssl.TLS_RSA_WITH_AES_128_CBC_SHA256 | 586 | | - ssl.TLS_RSA_WITH_AES_128_GCM_SHA256 | 587 | | - ssl.TLS_RSA_WITH_AES_256_CBC_SHA256 | 588 | | - ssl.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA | 589 | | - ssl.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA | 590 | | - ssl.TLS_RSA_WITH_DES_CBC_SHA | 591 | | - ssl.TLS_RSA_WITH_IDEA_CBC_SHA | 592 | | - ssl.TLS_RSA_WITH_NULL_MD5 | 593 | | - ssl.TLS_RSA_WITH_NULL_SHA | 594 | | - ssl.TLS_RSA_WITH_NULL_SHA256 | 595 | | - ssl.TLS_RSA_WITH_RC4_128_MD5 | 596 | | - ssl.TLS_RSA_WITH_RC4_128_SHA | 597 | | - ssl.TLS_RSA_WITH_SEED_CBC_SHA | 598 | | - ssl.SSL_VARIANT_DATAGRAM | 599 | | - ssl.SSL_VARIANT_STREAM | 600 | | - ssl.SSL_LIBRARY_VERSION_2 | 601 | | - ssl.SSL_LIBRARY_VERSION_3_0 | 602 | | - ssl.SSL_LIBRARY_VERSION_TLS_1_0 | 603 | | - ssl.SSL_LIBRARY_VERSION_TLS_1_1 | 604 | | - ssl.SSL_LIBRARY_VERSION_TLS_1_2 | 605 | | - ssl.SSL_LIBRARY_VERSION_TLS_1_3 | 606 | | - ssl.ssl2 | 607 | | - ssl.ssl3 | 608 | | - ssl.tls1.0 | 609 | | - ssl.tls1.1 | 610 | | - ssl.tls1.2 | 611 | | - ssl.tls1.3 | 612 | | | 613 | | - The following methods were missing thread | 614 | | locks, this has been fixed. | 615 | | | 616 | | - nss.nss_initialize | 617 | | - nss.nss_init_context | 618 | | - nss.nss_shutdown_context | 619 +-------------------------------------------------+-------------------------------------------------+ 620 621 .. _release_0.15.0: 622 623 `Release 0.15.0 <#release_0.15.0>`__ 624 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 625 626 .. container:: 627 628 +-------------------------------------------------+-------------------------------------------------+ 629 | Release Date | 2014-09-09 | 630 +-------------------------------------------------+-------------------------------------------------+ 631 | SCM Tag | PYNSS_RELEASE_0_15_0 | 632 +-------------------------------------------------+-------------------------------------------------+ 633 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 634 | | y/python-nss/releases/PYNSS_RELEASE_0_15_0/src/ | 635 +-------------------------------------------------+-------------------------------------------------+ 636 | Change Log | The primary enhancements in this version was | 637 | | fixing access to extensions in a | 638 | | CertificateRequest and giving access to | 639 | | CertificateRequest attributes. There is a bug | 640 | | in NSS which hides the existence of extensions | 641 | | in a CSR if the extensions are not contained in | 642 | | the first CSR attribute. This was fixable in | 643 | | python-nss without requiring a patch to NSS. | 644 | | Formerly python-nss did not provide access to | 645 | | the attributes in a CSR only the extensions, | 646 | | with this release all components of a CSR can | 647 | | be accessed. See test/test_cert_request.py for | 648 | | examples. | 649 | | | 650 | | - Add ability to read PEM data from a string. | 651 | | - Add more build instructions to README. | 652 | | Source README into package long description. | 653 | | - A SecItem now converts almost all DER | 654 | | encoded data to a string when it's str | 655 | | method is invoked, formerly it was limited | 656 | | to only a few objects. | 657 | | - The following classes were added: | 658 | | | 659 | | - CERTAttribute | 660 | | | 661 | | - The following class methods were added: | 662 | | | 663 | | - CertAttribute.format_lines | 664 | | - CertAttribute.format | 665 | | - nss.SecItem.get_integer | 666 | | | 667 | | - The following class properties were added: | 668 | | | 669 | | - CertificateRequest.attributes | 670 | | - CertAttribute.type_oid | 671 | | - CertAttribute.type_tag | 672 | | - CertAttribute.type_str | 673 | | - CertAttribute.values | 674 | | | 675 | | - The following module functions were added: | 676 | | | 677 | | - base64_to_binary | 678 | | | 679 | | - The following files were added: | 680 | | | 681 | | - test_cert_request | 682 +-------------------------------------------------+-------------------------------------------------+ 683 684 .. _release_0.14.1: 685 686 `Release 0.14.1 <#release_0.14.1>`__ 687 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 688 689 .. container:: 690 691 +-------------------------------------------------+-------------------------------------------------+ 692 | Release Date | 2013-10-28 | 693 +-------------------------------------------------+-------------------------------------------------+ 694 | SCM Tag | PYNSS_RELEASE_0_14_1 | 695 +-------------------------------------------------+-------------------------------------------------+ 696 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 697 | | y/python-nss/releases/PYNSS_RELEASE_0_14_1/src/ | 698 +-------------------------------------------------+-------------------------------------------------+ 699 | Change Log | Release 0.14.1 contains only modifications to | 700 | | tests and examples, otherwise functionally it | 701 | | is the same as release 0.14.0 | 702 | | | 703 | | - Fix bug in ssl_example.py and | 704 | | test_client_server.py where complete data | 705 | | was not read from socket. The Beast CVE fix | 706 | | in NSS causes only one octet to be sent in | 707 | | the first socket packet and then the | 708 | | remaining data is sent normally, this is | 709 | | known as 1/n-1 record splitting. The example | 710 | | and test SSL code sent short messages and | 711 | | then did a sock.recv(1024). We had always | 712 | | received the entire message in one | 713 | | sock.recv() call because it was so short. | 714 | | But sock.recv() does not guarantee how much | 715 | | data will be received, thus this was a | 716 | | coding mistake. The solution is straight | 717 | | forward, use newlines as a record separator | 718 | | and call sock.readline() instead of | 719 | | sock.recv(). sock.readline() calls | 720 | | sock.recv() internally until a complete line | 721 | | is read or the socket is closed. | 722 | | | 723 | | - Rewrite setup_certs.py, it was written like | 724 | | an expect script reacting to prompts read | 725 | | from a pseudo terminal but it was fragile | 726 | | and would hang on some systems. New version | 727 | | uses temporary password file and writes | 728 | | hardcoded responses to the stdin of certuil | 729 | | and modutil. | 730 | | | 731 | | - setup_certs now creates a new sql sytle NSS | 732 | | database (sql:pki) | 733 | | | 734 | | - All tests and examples now load the sql:pki | 735 | | database. Command line arg and variable | 736 | | changed from dbdir to db_name to reflect the | 737 | | database specification is no longer just a | 738 | | directory. | 739 | | | 740 | | - All command line process in test and | 741 | | examples now uses modern argparse module | 742 | | instead of deprecated getopt and optparse. | 743 | | Some command line args were tweaked. | 744 +-------------------------------------------------+-------------------------------------------------+ 745 746 .. _release_0.14.0: 747 748 `Release 0.14.0 <#release_0.14.0>`__ 749 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 750 751 .. container:: 752 753 Release Date 754 755 2013-05-10 756 757 SCM Tag 758 759 PYNSS_RELEASE_0_14_0 760 761 Source Download 762 763 https://ftp.mozilla.org/pub/mozilla.org/security/python-nss/releases/PYNSS_RELEASE_0_14_0/src/ 764 765 Change Log 766 767 The primary enhancements in this version is support of certifcate validation, OCSP support, and 768 support for the certificate "Authority Information Access" extension. 769 770 Enhanced certifcate validation including CA certs can be done via Certificate.verify() or 771 Certificate.is_ca_cert(). When cert validation fails you can now obtain diagnostic information as to 772 why the cert failed to validate. This is encapsulated in the CertVerifyLog class which is a iterable 773 collection of CertVerifyLogNode objects. Most people will probablby just print the string 774 representation of the returned CertVerifyLog object. Cert validation logging is handled by the 775 Certificate.verify() method. Support has also been added for the various key usage and cert type 776 entities which feature prominently during cert validation. 777 778 - Certificate() constructor signature changed from 779 780 Certificate(data=None, der_is_signed=True) 781 782 to 783 784 Certificate(data, certdb=cert_get_default_certdb(), perm=False, nickname=None) 785 786 This change was necessary because all certs should be added to the NSS temporary database when 787 they are loaded, but earlier code failed to do that. It's is not likely that an previous code was 788 failing to pass initialization data or the der_is_signed flag so this change should be backwards 789 compatible. 790 791 - Fix bug #922247, PKCS12Decoder.database_import() method. Importing into a NSS database would 792 sometimes fail or segfault. 793 794 - Error codes and descriptions were updated from upstream NSPR & NSS. 795 796 - The password callback did not allow for breaking out of a password prompting loop, now if None is 797 returned from the password callback the password prompting is terminated. 798 799 - nss.nss_shutdown_context now called from InitContext destructor, this assures the context is 800 shutdown even if the programmer forgot to. It's still best to explicitly shut it down, this is 801 just failsafe. 802 803 - Support was added for shutdown callbacks. 804 805 - cert_dump.py extended to print NS_CERT_TYPE_EXTENSION 806 807 - cert_usage_flags, nss_init_flags now support optional repr_kind parameter 808 809 - The following classes were added: 810 811 - nss.CertVerifyLogNode 812 - nss.CertVerifyLog 813 - error.CertVerifyError (exception) 814 - nss.AuthorityInfoAccess 815 - nss.AuthorityInfoAccesses 816 817 - The following class methods were added: 818 819 - nss.Certificate.is_ca_cert 820 - nss.Certificate.verify 821 - nss.Certificate.verify_with_log 822 - nss.Certificate.get_cert_chain 823 - nss.Certificate.check_ocsp_status 824 - nss.PK11Slot.list_certs 825 - nss.CertVerifyLogNode.format_lines 826 - nss.CertVerifyLog.format_lines 827 - nss.CRLDistributionPts.format_lines 828 829 - The following class properties were added: 830 831 - nss.CertVerifyLogNode.certificate 832 - nss.CertVerifyLogNode.error 833 - nss.CertVerifyLogNode.depth 834 - nss.CertVerifyLog.count 835 836 - The following module functions were added: 837 838 - nss.x509_cert_type 839 - nss.key_usage_flags 840 - nss.list_certs 841 - nss.find_certs_from_email_addr 842 - nss.find_certs_from_nickname 843 - nss.nss_get_version 844 - nss.nss_version_check 845 - nss.set_shutdown_callback 846 - nss.get_use_pkix_for_validation 847 - nss.set_use_pkix_for_validation 848 - nss.enable_ocsp_checking 849 - nss.disable_ocsp_checking 850 - nss.set_ocsp_cache_settings 851 - nss.set_ocsp_failure_mode 852 - nss.set_ocsp_timeout 853 - nss.clear_ocsp_cache 854 - nss.set_ocsp_default_responder 855 - nss.enable_ocsp_default_responder 856 - nss.disable_ocsp_default_responder 857 858 - The following files were added: 859 860 - src/py_traceback.h 861 - doc/examples/verify_cert.py 862 - test/test_misc.py 863 864 - The following constants were added: 865 866 - nss.KU_DIGITAL_SIGNATURE 867 - nss.KU_NON_REPUDIATION 868 - nss.KU_KEY_ENCIPHERMENT 869 - nss.KU_DATA_ENCIPHERMENT 870 - nss.KU_KEY_AGREEMENT 871 - nss.KU_KEY_CERT_SIGN 872 - nss.KU_CRL_SIGN 873 - nss.KU_ENCIPHER_ONLY 874 - nss.KU_ALL 875 - nss.KU_DIGITAL_SIGNATURE_OR_NON_REPUDIATION 876 - nss.KU_KEY_AGREEMENT_OR_ENCIPHERMENT 877 - nss.KU_NS_GOVT_APPROVED 878 - nss.PK11CertListUnique 879 - nss.PK11CertListUser 880 - nss.PK11CertListRootUnique 881 - nss.PK11CertListCA 882 - nss.PK11CertListCAUnique 883 - nss.PK11CertListUserUnique 884 - nss.PK11CertListAll 885 - nss.certUsageSSLClient 886 - nss.certUsageSSLServer 887 - nss.certUsageSSLServerWithStepUp 888 - nss.certUsageSSLCA 889 - nss.certUsageEmailSigner 890 - nss.certUsageEmailRecipient 891 - nss.certUsageObjectSigner 892 - nss.certUsageUserCertImport 893 - nss.certUsageVerifyCA 894 - nss.certUsageProtectedObjectSigner 895 - nss.certUsageStatusResponder 896 - nss.certUsageAnyCA 897 - nss.ocspMode_FailureIsVerificationFailure 898 - nss.ocspMode_FailureIsNotAVerificationFailure 899 900 Internal Changes 901 902 - Reimplement exception handling 903 904 - NSPRError is now derived from StandardException instead of EnvironmentError. It was never 905 correct to derive from EnvironmentError but was difficult to implement a new subclassed 906 exception with it's own attributes, using EnvironmentError had been expedient. 907 - NSPRError now derived from StandardException, provides: 908 909 - errno (numeric error code) 910 - strerror (error description associated with error code) 911 - error_message (optional detailed message) 912 - error_code (alias for errno) 913 - error_desc (alias for strerror) 914 915 - CertVerifyError derived from NSPRError, extends with: 916 917 - usages (bitmask of returned usages) 918 - log (CertVerifyLog object) 919 920 - Expose error lookup to sibling modules 921 922 - Use macros for bitmask_to_list functions to reduce code duplication and centralize logic. 923 924 - Add repr_kind parameter to cert_trust_flags_str() 925 926 - Add support for repr_kind AsEnumName to bitstring table lookup. 927 928 - Add cert_type_bitstr_to_tuple() lookup function 929 930 - Add PRTimeConvert(), used to convert Python time values to PRTime, centralizes conversion logic, 931 reduces duplication 932 933 - Add UTF8OrNoneConvert to better handle unicode parameters which are optional. 934 935 - Add Certificate_summary_format_lines() utility to generate concise certificate identification 936 info for output. 937 938 - Certificate_new_from_CERTCertificate now takes add_reference parameter to properly reference 939 count certs, should fix shutdown busy problems. 940 941 - Add print_traceback(), print_cert() debugging support. 942 943 .. _release_0.13.0: 944 945 `Release 0.13.0 <#release_0.13.0>`__ 946 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 947 948 .. container:: 949 950 +-------------------------------------------------+-------------------------------------------------+ 951 | Release Date | 2012-10-09 | 952 +-------------------------------------------------+-------------------------------------------------+ 953 | SCM Tag | PYNSS_RELEASE_0_13_0 | 954 +-------------------------------------------------+-------------------------------------------------+ 955 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 956 | | y/python-nss/releases/PYNSS_RELEASE_0_13_0/src/ | 957 +-------------------------------------------------+-------------------------------------------------+ 958 | Change Log | - Fix NSS SECITEM_CompareItem bug via | 959 | | workaround. | 960 | | - Fix incorrect format strings in | 961 | | PyArg_ParseTuple\* for: | 962 | | | 963 | | - GeneralName | 964 | | - BasicConstraints | 965 | | - cert_x509_key_usage | 966 | | | 967 | | - Fix bug when decoding certificate | 968 | | BasicConstraints extension | 969 | | - Fix hang in setup_certs. | 970 | | - For NSS >= 3.13 support | 971 | | CERTDB_TERMINAL_RECORD | 972 | | - You can now query for a specific certificate | 973 | | extension Certficate.get_extension() | 974 | | - The PublicKey formatting (i.e. format_lines) | 975 | | was augmented to format DSA keys (formerly | 976 | | it only recognized RSA keys). | 977 | | - Allow labels and values to be justified when | 978 | | printing objects | 979 | | | 980 | | .. rubric:: The following classes were added | 981 | | :name: the_following_classes_were_added | 982 | | | 983 | | - RSAGenParams | 984 | | | 985 | | .. rubric:: The following class methods were | 986 | | added | 987 | | | 988 | | :name: the_following_class_methods_were_added | 989 | | | 990 | | - nss.nss.Certificate.get_extension | 991 | | - nss.nss.PK11Slot.generate_key_pair | 992 | | - nss.nss.DSAPublicKey.format | 993 | | - nss.nss.DSAPublicKey.format_lines | 994 | | | 995 | | .. rubric:: The following module functions were | 996 | | added | 997 | | : | 998 | | name: the_following_module_functions_were_added | 999 | | | 1000 | | - nss.nss.pub_wrap_sym_key | 1001 | | | 1002 | | .. rubric:: The following internal utilities | 1003 | | were added | 1004 | | :na | 1005 | | me: the_following_internal_utilities_were_added | 1006 | | | 1007 | | - PyString_UTF8 | 1008 | | - SecItem_new_alloc() | 1009 | | | 1010 | | .. rubric:: The following class constructors | 1011 | | were modified to accept intialization | 1012 | | parameters | 1013 | | :name: the_following_class_constructors_w | 1014 | | ere_modified_to_accept_intialization_parameters | 1015 | | | 1016 | | - KEYPQGParams (DSA generation parameters) | 1017 | | | 1018 | | .. rubric:: The following were deprecated | 1019 | | :name: the_following_were_deprecated | 1020 | | | 1021 | | - nss.nss.make_line_pairs (replaced by | 1022 | | nss.nss.make_line_fmt_tuples) | 1023 | | | 1024 | | .. rubric:: Deprecated Functionality | 1025 | | :name: deprecated_functionality | 1026 | | | 1027 | | make_line_pairs() has been replaced by | 1028 | | make_line_fmt_tuples() because 2-valued tuples | 1029 | | were not sufficently general. It is expected | 1030 | | very few programs will have used this function, | 1031 | | it's mostly used internally but provided as a | 1032 | | support utility. | 1033 +-------------------------------------------------+-------------------------------------------------+ 1034 1035 .. _release_0.12.0: 1036 1037 `Release 0.12.0 <#release_0.12.0>`__ 1038 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1039 1040 .. container:: 1041 1042 +-------------------------------------------------+-------------------------------------------------+ 1043 | Release Date | 2011-06-06 | 1044 +-------------------------------------------------+-------------------------------------------------+ 1045 | SCM Tag | PYNSS_RELEASE_0_12_0 | 1046 +-------------------------------------------------+-------------------------------------------------+ 1047 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 1048 | | y/python-nss/releases/PYNSS_RELEASE_0_12_0/src/ | 1049 +-------------------------------------------------+-------------------------------------------------+ 1050 | Change Log | - Major new enhancement is additon of PKCS12 | 1051 | | support and AlgorithmID's. | 1052 | | - setup.py build enhancements | 1053 | | | 1054 | | - Now searches for the NSS and NSPR header | 1055 | | files rather than hardcoding their | 1056 | | location. This makes building friendlier | 1057 | | on other systems (i.e. debian) | 1058 | | - Now takes optional command line | 1059 | | arguments, -d or --debug will turn on | 1060 | | debug options during the build. | 1061 | | | 1062 | | - Fix reference counting bug in | 1063 | | PK11_password_callback() which contributed | 1064 | | to NSS not being able to shutdown due to | 1065 | | resources still in use. | 1066 | | - Add UTF-8 support to | 1067 | | ssl.config_server_session_id_cache() | 1068 | | - Added unit tests for cipher, digest, | 1069 | | client_server. | 1070 | | - All unittests now run, added test/run_tests | 1071 | | to invoke full test suite. | 1072 | | - Fix bug in test/setup_certs.py, hardcoded | 1073 | | full path to libnssckbi.so was causing | 1074 | | failures on 64-bit systems, just use the | 1075 | | libnssckbi.so basename, modutil will find it | 1076 | | on the standard search path. | 1077 | | - doc/examples/cert_dump.py uses new | 1078 | | AlgorithmID class to dump Signature | 1079 | | Algorithm | 1080 | | - doc/examples/ssl_example.py now can cleanly | 1081 | | shutdown NSS. | 1082 | | - Exception error messages now include PR | 1083 | | error text if available. | 1084 | | | 1085 | | .. rubric:: The following classes were replaced | 1086 | | :name: the_following_classes_were_replaced | 1087 | | | 1088 | | - SignatureAlgorithm replaced by new class | 1089 | | AlgorithmID | 1090 | | | 1091 | | .. rubric:: The following classes were added | 1092 | | :name: the_following_classes_were_added_2 | 1093 | | | 1094 | | - AlgorithmID | 1095 | | - PKCS12DecodeItem | 1096 | | - PKCS12Decoder | 1097 | | | 1098 | | .. rubric:: The following class methods were | 1099 | | added | 1100 | | | 1101 | | :name: the_following_class_methods_were_added_2 | 1102 | | | 1103 | | - PK11Slot.authenticate() | 1104 | | - PK11Slot.get_disabled_reason() | 1105 | | - PK11Slot.has_protected_authentication_path() | 1106 | | - PK11Slot.has_root_certs() | 1107 | | - PK11Slot.is_disabled() | 1108 | | - PK11Slot.is_friendly() | 1109 | | - PK11Slot.is_internal() | 1110 | | - PK11Slot.is_logged_in() | 1111 | | - PK11Slot.is_removable() | 1112 | | - PK11Slot.logout() | 1113 | | - PK11Slot.need_login() | 1114 | | - PK11Slot.need_user_init() | 1115 | | - PK11Slot.user_disable() | 1116 | | - PK11Slot.user_enable() | 1117 | | - PKCS12DecodeItem.format() | 1118 | | - PKCS12DecodeItem.format_lines() | 1119 | | - PKCS12Decoder.database_import() | 1120 | | - PKCS12Decoder.format() | 1121 | | - PKCS12Decoder.format_lines() | 1122 | | | 1123 | | .. rubric:: The following class properties were | 1124 | | added | 1125 | | : | 1126 | | name: the_following_class_properties_were_added | 1127 | | | 1128 | | - AlgorithmID.id_oid | 1129 | | - AlgorithmID.id_str | 1130 | | - AlgorithmID.id_tag | 1131 | | - AlgorithmID.parameters | 1132 | | - PKCS12DecodeItem.certificate | 1133 | | - PKCS12DecodeItem.friendly_name | 1134 | | - PKCS12DecodeItem.has_key | 1135 | | - PKCS12DecodeItem.shroud_algorithm_id | 1136 | | - PKCS12DecodeItem.signed_cert_der | 1137 | | - PKCS12DecodeItem.type | 1138 | | - SignedData.data | 1139 | | - SignedData.der | 1140 | | | 1141 | | .. rubric:: The following module functions were | 1142 | | added | 1143 | | :na | 1144 | | me: the_following_module_functions_were_added_2 | 1145 | | | 1146 | | - nss.nss.dump_certificate_cache_info() | 1147 | | - nss.nss.find_slot_by_name() | 1148 | | - nss.nss.fingerprint_format_lines() | 1149 | | - nss.nss.get_internal_slot() | 1150 | | - nss.nss.is_fips() | 1151 | | - nss.nss.need_pw_init() | 1152 | | - nss.nss.nss_init_read_write() | 1153 | | - nss.nss.pk11_disabled_reason_name() | 1154 | | - nss.nss.pk11_disabled_reason_str() | 1155 | | - nss.nss.pk11_logout_all() | 1156 | | - nss.nss.pkcs12_cipher_from_name() | 1157 | | - nss.nss.pkcs12_cipher_name() | 1158 | | - nss.nss.pkcs12_enable_all_ciphers() | 1159 | | - nss.nss.pkcs12_enable_cipher() | 1160 | | - nss.nss.pkcs12_export() | 1161 | | - nss.nss.pkcs12_map_cipher() | 1162 | | - n | 1163 | | ss.nss.pkcs12_set_nickname_collision_callback() | 1164 | | - nss.nss.pkcs12_set_preferred_cipher() | 1165 | | - nss.nss.token_exists() | 1166 | | - nss.ssl.config_mp_server_sid_cache() | 1167 | | - ns | 1168 | | s.ssl.config_server_session_id_cache_with_opt() | 1169 | | - nss.ssl.get_max_server_cache_locks() | 1170 | | - nss.ssl.set_max_server_cache_locks() | 1171 | | - nss.ssl.shutdown_server_session_id_cache() | 1172 | | | 1173 | | .. rubric:: The following constants were added | 1174 | | :name: the_following_constants_were_added | 1175 | | | 1176 | | - nss.nss.int.PK11_DIS_COULD_NOT_INIT_TOKEN | 1177 | | - nss.nss.int.PK11_DIS_NONE | 1178 | | - nss.nss.int.PK11_DIS_TOKEN_NOT_PRESENT | 1179 | | - nss.nss.int.PK11_DIS_TOKEN_VERIFY_FAILED | 1180 | | - nss.nss.int.PK11_DIS_USER_SELECTED | 1181 | | - nss.nss.int.PKCS12_DES_56 | 1182 | | - nss.nss.int.PKCS12_DES_EDE3_168 | 1183 | | - nss.nss.int.PKCS12_RC2_CBC_128 | 1184 | | - nss.nss.int.PKCS12_RC2_CBC_40 | 1185 | | - nss.nss.int.PKCS12_RC4_128 | 1186 | | - nss.nss.int.PKCS12_RC4_40 | 1187 | | | 1188 | | .. rubric:: The following files were added | 1189 | | :name: the_following_files_were_added | 1190 | | | 1191 | | - test/run_tests | 1192 | | - test/test_cipher.py (replaces | 1193 | | cipher_test.py) | 1194 | | - test/test_client_server.py | 1195 | | - test/test_digest.py (replaces | 1196 | | digest_test.py) | 1197 | | - test/test_pkcs12.py | 1198 | | | 1199 | | .. rubric:: Deprecated Functionality | 1200 | | :name: deprecated_functionality_2 | 1201 | | | 1202 | | - SignatureAlgorithm | 1203 +-------------------------------------------------+-------------------------------------------------+ 1204 1205 .. _release_0.11.0: 1206 1207 `Release 0.11.0 <#release_0.11.0>`__ 1208 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1209 1210 .. container:: 1211 1212 +-------------------------------------------------+-------------------------------------------------+ 1213 | Release Date | 2011-02-21 | 1214 +-------------------------------------------------+-------------------------------------------------+ 1215 | SCM Tag | PYNSS_RELEASE_0_11_0 | 1216 +-------------------------------------------------+-------------------------------------------------+ 1217 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 1218 | | y/python-nss/releases/PYNSS_RELEASE_0_11_0/src/ | 1219 +-------------------------------------------------+-------------------------------------------------+ 1220 | Change Log | .. rubric:: External Changes | 1221 | | :name: external_changes | 1222 | | | 1223 | | - Add AddrInfo class to support IPv6 address | 1224 | | resolution. Supports iteration over it's set | 1225 | | of NetworkAddress objects and provides | 1226 | | hostname, canonical_name object properties. | 1227 | | - Add PR_AI_\* constants. | 1228 | | - NetworkAddress constructor and | 1229 | | NetworkAddress.set_from_string() added | 1230 | | optional family parameter. This is necessary | 1231 | | for utilizing PR_GetAddrInfoByName(). | 1232 | | - NetworkAddress initialized via a string | 1233 | | parameter are now initialized via | 1234 | | PR_GetAddrInfoByName using family. | 1235 | | - Add NetworkAddress.address property to | 1236 | | return the address sans the port as a | 1237 | | string. NetworkAddress.str() includes the | 1238 | | port. For IPv6 the a hex string must be | 1239 | | enclosed in brackets if a port is appended | 1240 | | to it, the bracketed hex address with | 1241 | | appended with a port is unappropriate in | 1242 | | some circumstances, hence the new address | 1243 | | property to permit either the address string | 1244 | | with a port or without a port. | 1245 | | - Fix the implementation of the | 1246 | | NetworkAddress.family property, it was | 1247 | | returning bogus data due to wrong native | 1248 | | data size. | 1249 | | - HostEntry objects now support iteration and | 1250 | | indexing of their NetworkAddress members. | 1251 | | - Add io.addr_family_name() function to return | 1252 | | string representation of PR_AF_\* constants. | 1253 | | - Modify example and test code to utilize | 1254 | | AddrInfo instead of deprecated | 1255 | | NetworkAddress functionality. Add address | 1256 | | family command argument to ssl_example. | 1257 | | - Fix pty import statement in | 1258 | | test/setup_certs.py | 1259 | | | 1260 | | .. rubric:: Deprecated Functionality | 1261 | | :name: deprecated_functionality_3 | 1262 | | | 1263 | | - NetworkAddress initialized via a string | 1264 | | parameter is now deprecated. AddrInfo should | 1265 | | be used instead. | 1266 | | - NetworkAddress.set_from_string is now | 1267 | | deprecated. AddrInfo should be used instead. | 1268 | | - NetworkAddress.hostentry is deprecated. It | 1269 | | was a bad idea, NetworkAddress objects can | 1270 | | support both IPv4 and IPv6, but a HostEntry | 1271 | | object can only support IPv4. Plus the | 1272 | | implementation depdended on being able to | 1273 | | perform a reverse DNS lookup which is not | 1274 | | always possible. | 1275 | | - HostEntry.get_network_addresses() and | 1276 | | HostEntry.get_network_address() are now | 1277 | | deprecated. In addition their port parameter | 1278 | | is now no longer respected. HostEntry | 1279 | | objects now support iteration and indexing | 1280 | | of their NetworkAddress and that should be | 1281 | | used to access their NetworkAddress objects | 1282 | | instead. | 1283 | | | 1284 | | .. rubric:: Internal Changes | 1285 | | :name: internal_changes | 1286 | | | 1287 | | - Utilize PR_NetAddrFamily() access macro | 1288 | | instead of explict access. | 1289 | | - Add PRNetAddr_port() utility to hide host | 1290 | | vs. network byte order requirements when | 1291 | | accessing the port inside a PRNetAddr and | 1292 | | simplify accessing the IPv4 vs. IPv6 port | 1293 | | variants. | 1294 | | - Replace the use of PR_InitializeNetAddr() | 1295 | | with PR_SetNetAddr(), the later properly | 1296 | | handles IPv6, the former did not. | 1297 | | - Rename NetworkAddress.addr to | 1298 | | NetworkAddress.pr_netaddr for naming | 1299 | | consistency. | 1300 | | - Update HostEntry documentation to indicate | 1301 | | it's deprecated status. | 1302 | | - Remove redundant implementation of | 1303 | | NetworkAddress_new_from_PRNetAddr from | 1304 | | py_ssl.c and properly import the | 1305 | | implementation from py_nspr_io.c. | 1306 | | - The following other non-IPv6 fixes were also | 1307 | | made because they were discovered while | 1308 | | doing the IPv6 work: | 1309 | | - Move definition of TYPE_READY to | 1310 | | py_nspr_common.h so it can be shared. Update | 1311 | | all modules to utilize it. | 1312 | | - Replace incorrect use of free() with | 1313 | | PyMem_Free for string data returned by | 1314 | | Python's utf-8 encoder. | 1315 | | - Add header dependency information to | 1316 | | setup.py so modules will be rebuilt when | 1317 | | header files change. | 1318 | | - Add utility tuple_str() to convert a tuple | 1319 | | to a string representation by calling str() | 1320 | | on each object in the tuple. Tuple.str() in | 1321 | | CPython only calls repr() on each member. | 1322 | | - HostEntry objects now store their aliases | 1323 | | and NetworkAddress's in internal tuples. | 1324 +-------------------------------------------------+-------------------------------------------------+ 1325 1326 .. _release_0.10.0: 1327 1328 `Release 0.10.0 <#release_0.10.0>`__ 1329 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1330 1331 .. container:: 1332 1333 +-------------------------------------------------+-------------------------------------------------+ 1334 | Release Date | 2010-07-25 | 1335 +-------------------------------------------------+-------------------------------------------------+ 1336 | SCM Tag | PYNSS_RELEASE_0_10_0 | 1337 +-------------------------------------------------+-------------------------------------------------+ 1338 | Source Download | https://ftp.mozilla.org/pub/mozilla.org/securit | 1339 | | y/python-nss/releases/PYNSS_RELEASE_0_10_0/src/ | 1340 +-------------------------------------------------+-------------------------------------------------+ 1341 | Change Log | .. rubric:: The following classes were added: | 1342 | | :name: the_following_classes_were_added_3 | 1343 | | | 1344 | | - InitParameters | 1345 | | - InitContext | 1346 | | | 1347 | | .. rubric:: The following module functions were | 1348 | | added: | 1349 | | :na | 1350 | | me: the_following_module_functions_were_added_3 | 1351 | | | 1352 | | - nss.nss.nss_initialize() | 1353 | | - nss.nss.nss_init_context() | 1354 | | - nss.nss.nss_shutdown_context() | 1355 | | - nss.nss.nss_init_flags() | 1356 | | | 1357 | | .. rubric:: The following constants were added: | 1358 | | :name: the_following_constants_were_added_2 | 1359 | | | 1360 | | - NSS_INIT_READONLY | 1361 | | - NSS_INIT_NOCERTDB | 1362 | | - NSS_INIT_NOMODDB | 1363 | | - NSS_INIT_FORCEOPEN | 1364 | | - NSS_INIT_NOROOTINIT | 1365 | | - NSS_INIT_OPTIMIZESPACE | 1366 | | - NSS_INIT_PK11THREADSAFE | 1367 | | - NSS_INIT_PK11RELOAD | 1368 | | - NSS_INIT_NOPK11FINALIZE | 1369 | | - NSS_INIT_RESERVED | 1370 | | - NSS_INIT_COOPERATE | 1371 | | | 1372 | | .. rubric:: The following file was added: | 1373 | | :name: the_following_file_was_added | 1374 | | | 1375 | | - test/setup_certs.py | 1376 +-------------------------------------------------+-------------------------------------------------+ 1377 1378 .. _release_0.9.0: 1379 1380 `Release 0.9.0 <#release_0.9.0>`__ 1381 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1382 1383 .. container:: 1384 1385 +-------------------------------------------------+-------------------------------------------------+ 1386 | Release Date | 2010-05-28 | 1387 +-------------------------------------------------+-------------------------------------------------+ 1388 | SCM Tag | PYNSS_RELEASE_0_9_0 | 1389 +-------------------------------------------------+-------------------------------------------------+ 1390 | Source Download | | 1391 +-------------------------------------------------+-------------------------------------------------+ 1392 | Change Log | .. rubric:: General Modifications: | 1393 | | :name: general_modifications | 1394 | | | 1395 | | - Correct definciencies in | 1396 | | auth_certificate_callback found in several | 1397 | | of the example files and documentation. If | 1398 | | you've copied that code you should merge | 1399 | | those changes in. | 1400 | | - Unicode objects now accepted as well as str | 1401 | | objects for interfaces expecting a string. | 1402 | | - Sockets were enhanced thusly: | 1403 | | | 1404 | | - Threads will now yield during blocking | 1405 | | IO. | 1406 | | - Socket.makefile() reimplemented | 1407 | | | 1408 | | - file object methods that had been | 1409 | | missing (readlines(), sendall(), and | 1410 | | iteration) were implemented | 1411 | | - makefile now just returns the same | 1412 | | - Socket object but increments an "open" | 1413 | | ref count. Thus a Socket object | 1414 | | behaves like a file object and must be | 1415 | | closed once for each makefile() call | 1416 | | before it's actually closed. | 1417 | | | 1418 | | - Sockets now support the iter protocol | 1419 | | - Added methods: | 1420 | | | 1421 | | - Socket.readlines() | 1422 | | - Socket.sendall() | 1423 | | | 1424 | | - Apply patches from Miloslav Trmač | 1425 | | <mitr@redhat.com> for ref counting and | 1426 | | threading support. Thanks Miloslav! | 1427 | | - Review all ref counting, numerous ref | 1428 | | counting fixes | 1429 | | - Implement cyclic garbage collection support | 1430 | | by adding object traversal and clear methods | 1431 | | - Identify static variables, move to thread | 1432 | | local storage | 1433 | | - Remove python-nss specific httplib.py, no | 1434 | | longer needed python-nss now compatible with | 1435 | | standard library | 1436 | | - Rewrite httplib_example.py to use standard | 1437 | | library and illustrate ssl, non-ssl, | 1438 | | connection class, http class usage | 1439 | | | 1440 | | .. rubric:: The following classes were added: | 1441 | | :name: the_following_classes_were_added_4 | 1442 | | | 1443 | | - AuthKeyID | 1444 | | - BasicConstraints | 1445 | | - CRLDistributionPoint | 1446 | | - CRLDistributionPts | 1447 | | - CertificateExtension | 1448 | | - GeneralName | 1449 | | - SignedCRL | 1450 | | - DN | 1451 | | - RDN | 1452 | | - AVA | 1453 | | - CertificateRequest | 1454 | | | 1455 | | .. rubric:: The following module functions were | 1456 | | added: | 1457 | | :na | 1458 | | me: the_following_module_functions_were_added_4 | 1459 | | | 1460 | | - nss.nss.nss_is_initialized() | 1461 | | - nss.nss.cert_crl_reason_from_name() | 1462 | | - nss.nss.cert_crl_reason_name() | 1463 | | - nss.nss.cert_general_name_type_from_name() | 1464 | | - nss.nss.cert_general_name_type_name() | 1465 | | - nss.nss.cert_usage_flags() | 1466 | | - nss.nss.decode_der_crl() | 1467 | | - nss.nss.der_universal_secitem_fmt_lines() | 1468 | | - nss.nss.import_crl() | 1469 | | - nss.nss.make_line_pairs() | 1470 | | - nss.nss.oid_dotted_decimal() | 1471 | | - nss.nss.oid_str() | 1472 | | - nss.nss.oid_tag() | 1473 | | - nss.nss.oid_tag_name() | 1474 | | - nss.nss.read_der_from_file() | 1475 | | - nss.nss.x509_alt_name() | 1476 | | - nss.nss.x509_ext_key_usage() | 1477 | | - nss.nss.x509_key_usage() | 1478 | | | 1479 | | .. rubric:: The following class methods and | 1480 | | properties were added: | 1481 | | :name: the_fo | 1482 | | llowing_class_methods_and_properties_were_added | 1483 | | | 1484 | | Note: it's a method if the name is suffixed | 1485 | | with (), a propety otherwise | 1486 | | | 1487 | | - Socket.next() | 1488 | | - Socket.readlines() | 1489 | | - Socket.sendall() | 1490 | | - SSLSocket.next() | 1491 | | - SSLSocket.readlines() | 1492 | | - SSLSocket.sendall() | 1493 | | - AuthKeyID.key_id | 1494 | | - AuthKeyID.serial_number | 1495 | | - AuthKeyID.get_general_names() | 1496 | | - CRLDistributionPoint.issuer | 1497 | | - CRLDistributionPoint.get_general_names() | 1498 | | - CRLDistributionPoint.get_reasons() | 1499 | | - CertDB.find_crl_by_cert() | 1500 | | - CertDB.find_crl_by_name() | 1501 | | - Certificate.extensions | 1502 | | - CertificateExtension.critical | 1503 | | - CertificateExtension.name | 1504 | | - CertificateExtension.oid | 1505 | | - CertificateExtension.oid_tag | 1506 | | - CertificateExtension.value | 1507 | | - GeneralName.type_enum | 1508 | | - GeneralName.type_name | 1509 | | - GeneralName.type_string | 1510 | | - SecItem.der_to_hex() | 1511 | | - SecItem.get_oid_sequence() | 1512 | | - SecItem.to_hex() | 1513 | | - SignedCRL.delete_permanently() | 1514 | | - AVA.oid | 1515 | | - AVA.oid_tag | 1516 | | - AVA.value | 1517 | | - AVA.value_str | 1518 | | - DN.cert_uid | 1519 | | - DN.common_name | 1520 | | - DN.country_name | 1521 | | - DN.dc_name | 1522 | | - DN.email_address | 1523 | | - DN.locality_name | 1524 | | - DN.org_name | 1525 | | - DN.org_unit_name | 1526 | | - DN.state_name | 1527 | | - DN.add_rdn() | 1528 | | - DN.has_key() | 1529 | | - RDN.has_key() | 1530 | | | 1531 | | .. rubric:: The following module functions were | 1532 | | removed: | 1533 | | :na | 1534 | | me: the_following_module_functions_were_removed | 1535 | | | 1536 | | Note: use nss.nss.oid_tag() instead | 1537 | | | 1538 | | - nss.nss.sec_oid_tag_from_name() | 1539 | | - nss.nss.sec_oid_tag_name() | 1540 | | - nss.nss.sec_oid_tag_str() | 1541 | | | 1542 | | .. rubric:: The following files were added: | 1543 | | :name: the_following_files_were_added_2 | 1544 | | | 1545 | | - doc/examples/cert_dump.py | 1546 | | - test/test_cert_components.py | 1547 +-------------------------------------------------+-------------------------------------------------+ 1548 1549 .. _release_0.8.0: 1550 1551 `Release 0.8.0 <#release_0.8.0>`__ 1552 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1553 1554 .. container:: 1555 1556 +-------------------------------------------------+-------------------------------------------------+ 1557 | Release Date | 2009-09-21 | 1558 +-------------------------------------------------+-------------------------------------------------+ 1559 | SCM Tag | PYNSS_RELEASE_0_8_0 | 1560 +-------------------------------------------------+-------------------------------------------------+ 1561 | Source Download | | 1562 +-------------------------------------------------+-------------------------------------------------+ 1563 | Change Log | .. rubric:: General Modifications: | 1564 | | :name: general_modifications_2 | 1565 | | | 1566 | | - SecItem's now support indexing and slicing | 1567 | | on their data | 1568 | | - Clean up parsing and parameter validation of | 1569 | | variable arg functions | 1570 | | | 1571 | | .. rubric:: The following were added: | 1572 | | :name: the_following_were_added | 1573 | | | 1574 | | - SecItem.type SecItem.len | 1575 | | - SecItem.data | 1576 | | - PK11SymKey.key_data | 1577 | | - PK11SymKey.key_length | 1578 | | - PK11SymKey.slot | 1579 | | - create_context_by_sym_key | 1580 | | - param_from_iv | 1581 | | - generate_new_param | 1582 | | - get_iv_length | 1583 | | - get_block_size | 1584 | | - get_pad_mechanism | 1585 +-------------------------------------------------+-------------------------------------------------+ 1586 1587 .. _release_0.7.0: 1588 1589 `Release 0.7.0 <#release_0.7.0>`__ 1590 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1591 1592 .. container:: 1593 1594 +-------------------------------------------------+-------------------------------------------------+ 1595 | Release Date | 2009-09-18 | 1596 +-------------------------------------------------+-------------------------------------------------+ 1597 | SCM Tag | | 1598 +-------------------------------------------------+-------------------------------------------------+ 1599 | Source Download | | 1600 +-------------------------------------------------+-------------------------------------------------+ 1601 | Change Log | .. rubric:: General Modifications: | 1602 | | :name: general_modifications_3 | 1603 | | | 1604 | | - add support for symmetric | 1605 | | encryption/decryption | 1606 | | - more support for digests (hashes) | 1607 | | | 1608 | | .. rubric:: The following classes added: | 1609 | | :name: the_following_classes_added | 1610 | | | 1611 | | - PK11SymKey | 1612 | | - PK11Context | 1613 | | | 1614 | | .. rubric:: The following methods and functions | 1615 | | added: | 1616 | | : | 1617 | | name: the_following_methods_and_functions_added | 1618 | | | 1619 | | - get_best_wrap_mechanism | 1620 | | - get_best_key_length | 1621 | | - key_gen | 1622 | | - derive | 1623 | | - get_key_length | 1624 | | - digest_key | 1625 | | - clone_context | 1626 | | - digest_begin | 1627 | | - digest_op | 1628 | | - cipher_op | 1629 | | - finalize | 1630 | | - digest_final | 1631 | | - read_hex | 1632 | | - hash_buf | 1633 | | - sec_oid_tag_str | 1634 | | - sec_oid_tag_name | 1635 | | - sec_oid_tag_from_name | 1636 | | - key_mechanism_type_name | 1637 | | - key_mechanism_type_from_name | 1638 | | - pk11_attribute_type_name | 1639 | | - pk11_attribute_type_from_name | 1640 | | - get_best_slot | 1641 | | - get_internal_key_slot | 1642 | | - create_context_by_sym_key | 1643 | | - import_sym_key | 1644 | | - create_digest_context | 1645 | | - param_from_iv | 1646 | | - param_from_algid | 1647 | | - generate_new_param | 1648 | | - algtag_to_mechanism | 1649 | | - mechanism_to_algtag | 1650 | | | 1651 | | .. rubric:: The following files added: | 1652 | | :name: the_following_files_added | 1653 | | | 1654 | | - test/cipher_test.py | 1655 | | - test/digest_test.py | 1656 +-------------------------------------------------+-------------------------------------------------+ 1657 1658 .. _release_0.6.0: 1659 1660 `Release 0.6.0 <#release_0.6.0>`__ 1661 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1662 1663 .. container:: 1664 1665 +-------------------------------------------------+-------------------------------------------------+ 1666 | Release Date | 2009-07-08 | 1667 +-------------------------------------------------+-------------------------------------------------+ 1668 | SCM Tag | | 1669 +-------------------------------------------------+-------------------------------------------------+ 1670 | Source Download | | 1671 +-------------------------------------------------+-------------------------------------------------+ 1672 | Change Log | .. rubric:: General Modifications: | 1673 | | :name: general_modifications_4 | 1674 | | | 1675 | | - fix Red Hat bug #510343 | 1676 | | client_auth_data_callback seg faults if | 1677 | | False is returned from callback | 1678 +-------------------------------------------------+-------------------------------------------------+ 1679 1680 .. _release_0.5.0: 1681 1682 `Release 0.5.0 <#release_0.5.0>`__ 1683 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1684 1685 .. container:: 1686 1687 +-------------------------------------------------+-------------------------------------------------+ 1688 | Release Date | 2009-07-01 | 1689 +-------------------------------------------------+-------------------------------------------------+ 1690 | SCM Tag | | 1691 +-------------------------------------------------+-------------------------------------------------+ 1692 | Source Download | | 1693 +-------------------------------------------------+-------------------------------------------------+ 1694 | Change Log | .. rubric:: General Modifications: | 1695 | | :name: general_modifications_5 | 1696 | | | 1697 | | - restore ssl.nss_init and ssl.nss_shutdown | 1698 | | but make them deprecated | 1699 | | - add \__version_\_ string to nss module | 1700 +-------------------------------------------------+-------------------------------------------------+ 1701 1702 .. _release_0.4.0: 1703 1704 `Release 0.4.0 <#release_0.4.0>`__ 1705 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1706 1707 .. container:: 1708 1709 +-------------------------------------------------+-------------------------------------------------+ 1710 | Release Date | 2009-06-30 | 1711 +-------------------------------------------------+-------------------------------------------------+ 1712 | SCM Tag | | 1713 +-------------------------------------------------+-------------------------------------------------+ 1714 | Source Download | | 1715 +-------------------------------------------------+-------------------------------------------------+ 1716 | Change Log | .. rubric:: General Modifications: | 1717 | | :name: general_modifications_6 | 1718 | | | 1719 | | - add binding for NSS_NoDB_Init(), Red Hat bug | 1720 | | #509002 | 1721 | | - move nss_init and nss_shutdown from ssl | 1722 | | module to nss module | 1723 +-------------------------------------------------+-------------------------------------------------+ 1724 1725 .. _release_0.3.0: 1726 1727 `Release 0.3.0 <#release_0.3.0>`__ 1728 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1729 1730 .. container:: 1731 1732 +-------------------------------------------------+-------------------------------------------------+ 1733 | Release Date | 2009-06-04 | 1734 +-------------------------------------------------+-------------------------------------------------+ 1735 | SCM Tag | | 1736 +-------------------------------------------------+-------------------------------------------------+ 1737 | Source Download | | 1738 +-------------------------------------------------+-------------------------------------------------+ 1739 | Change Log | .. rubric:: General Modifications: | 1740 | | :name: general_modifications_7 | 1741 | | | 1742 | | - import to Mozilla CVS, tweak directory | 1743 | | layout | 1744 +-------------------------------------------------+-------------------------------------------------+ 1745 1746 .. _release_0.2.0: 1747 1748 `Release 0.2.0 <#release_0.2.0>`__ 1749 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1750 1751 .. container:: 1752 1753 +-------------------------------------------------+-------------------------------------------------+ 1754 | Release Date | 2009-05-21 | 1755 +-------------------------------------------------+-------------------------------------------------+ 1756 | SCM Tag | | 1757 +-------------------------------------------------+-------------------------------------------------+ 1758 | Source Download | | 1759 +-------------------------------------------------+-------------------------------------------------+ 1760 | Change Log | .. rubric:: General Modifications: | 1761 | | :name: general_modifications_8 | 1762 | | | 1763 | | - apply patch from Red Hat bug #472805, | 1764 | | (Miloslav Trmač) | 1765 | | - Don't allow closing a socket twice, that | 1766 | | causes crashes. | 1767 | | - Fix return value creation in | 1768 | | SSLSocket.get_security_status | 1769 | | - Convert licensing to MPL tri-license | 1770 | | | 1771 | | .. rubric:: The following were added: | 1772 | | :name: the_following_were_added_2 | 1773 | | | 1774 | | - nss.io.Socket.new_socket_pair() | 1775 | | - nss.io.Socket.poll() | 1776 | | - nss.io.Socket.import_tcp_socket() | 1777 | | - | 1778 | | nss.nss.Certificate.get_subject_common_name() | 1779 | | - nss.nss.generate_random() | 1780 | | - nss.ssl.SSLSocket.import_tcp_socket() | 1781 +-------------------------------------------------+-------------------------------------------------+ 1782 1783 .. _release_0.1.0: 1784 1785 `Release 0.1.0 <#release_0.1.0>`__ 1786 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1787 1788 .. container:: 1789 1790 =============== =============== 1791 Release Date 2008-07-09 1792 SCM Tag 1793 Source Download 1794 Change Log Initial release 1795 =============== ===============