>> It's actually easier to do all or nothing. I'm tempted to just report
>> 'critical' extensions.
>
> Simpler to provide them all
I very much doubt that, at least if you want to report decoded
information. Conceptually, there is an infinite number of extensions,
and when you are done, I can sho
> > > I'm wondering if I should try to pull some extension attributes out of
> > > the cert, and add them to the dict, as well. Like subjectAltName, for
> > > instance. Or should we just wait till someone wants it and files a
> > > bug report?
> >
> > If you have the time and inclination to do t
> > I'm wondering if I should try to pull some extension attributes out of
> > the cert, and add them to the dict, as well. Like subjectAltName, for
> > instance. Or should we just wait till someone wants it and files a
> > bug report?
>
> If you have the time and inclination to do that, feel fr
Neal, Anthony, Thomas W., and I have a spreadsheet that was started to
keep track of what needs to be done in what needs to be done in 2.6
for Py3K transitioning:
http://spreadsheets.google.com/pub?key=pCKY4oaXnT81FrGo3ShGHGg . I am
opening the spreadsheet up to everyone so that others can help
ma
I wrote:
> But I can open a ticket with the proposed changes if that would help.
Figure it can't hurt - I've created issue 1112 with the proposed patch
to the test_1413192.py module.
-- David
___
Python-Dev mailing list
Python-Dev@python.org
http://ma
"Martin v. Löwis" <[EMAIL PROTECTED]> writes:
>> warning: DBTxn aborted in destructor. No prior commit() or abort().
>
> I have seen these as well. bsddb isn't very forgiving when you have
> a Python exception inside a bsddb transaction, in the test suite.
> IIRC, the exception will abort the tra
> warning: DBTxn aborted in destructor. No prior commit() or abort().
I have seen these as well. bsddb isn't very forgiving when you have
a Python exception inside a bsddb transaction, in the test suite.
IIRC, the exception will abort the transaction, then the unittest
fixture teardown will close
Guido van Rossum wrote:
> By all means do write up a PEP -- it's hard to generalize from that one
> example.
I'll write a PEP as soon as I get a chance. But the
generalisation is pretty straightforward -- just replicate
that signature for each of the binary operations.
--
Greg
__
I previously wrote:
> (...)
> which I tracked back to an abort() call within the bsddb library as
> final destruction is happening at Python exit. (When clearing the
> test_bsddb module, and the bsddb wrapper tries to access a log file
> related to an open transaction). (...)
For those more fami
"Martin v. Löwis" <[EMAIL PROTECTED]> writes:
>> My build slave (http://www.python.org/dev/buildbot/trunk/x86%20XP%20trunk)
>> keeps failing because of a crash that appears to be in the bsddb
>> module. I assume the master deems the slave to be lost because it's
>> sitting there waiting on me to
> I'm wondering if I should try to pull some extension attributes out of
> the cert, and add them to the dict, as well. Like subjectAltName, for
> instance. Or should we just wait till someone wants it and files a
> bug report?
If you have the time and inclination to do that, feel free to. Cover
All of this makes me think that some folks may want to do more
processing on certificates with more advanced tools, and for that they
will need access to the full bits of the certificate. I'll add the
ability to retrieve that as well.
I'm wondering if I should try to pull some extension attribute
I was just looking for some csv DictWriter examples for a colleague at work
and was myself confused by the apparent transformation which took place in
the Reader Objects and Writer Objects sections. Each of the methods is now
prefixed by "csv.csvreader." or "csv.csvwriter." Neither expression was
> 'subject': ((('serialNumber', u'2497886'),),
> (('1.3.6.1.4.1.311.60.2.1.3', u'US'),),
> (('1.3.6.1.4.1.311.60.2.1.2', u'Delaware'),),
> (('countryName', u'US'),),
> (('postalCode', u'94043'),),
> (('stateOrProvinceName', u'Califor
> OK, I can make it a tuple (list of RDNs) of tuples (one for each RDN)
> of tuples (one for each attribute in the RDN).
Which gets us to this:
{'issuer': ((('countryName', u'US'),),
(('stateOrProvinceName', u'Delaware'),),
(('localityName', u'Wilmington'),),
(
> There's a field on the X509_NAME_ENTRY struct which gives the level.
> OK, I can make it a tuple (list of RDNs) of tuples (one for each RDN)
> of tuples (one for each attribute in the RDN). And maybe add a
> flatten function to the ssl.py module :-).
>
See my other proposal as well. As nobody
> Well, that's the same bug that John Nagle complains about.
Yes, I agree.
Bill
___
Python-Dev mailing list
Python-Dev@python.org
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe:
http://mail.python.org/mailman/options/python-dev/archive%
> Yup, got it. I don't see a way in the OpenSSL library functions I'm
> using (X509_NAME_ENTRY_get_object, X509_NAME_ENTRY_get_data) to
> distinguish between different RDNs, but I'll take a look at the source
> for X509_NAME_print_ex, which does seem to be able to do this.
There's a field on the
> See the example certificates. If you get (('cn','a'),('email','b')),
> you can't tell whether that's two single-valued RDNs in a DN,
> or one multi-valued RDN with two attribute/value pairs.
Yup, got it. I don't see a way in the OpenSSL library functions I'm
using (X509_NAME_ENTRY_get_object, X
> % openssl x509 -subject -noout -in attachment-0002.crt
> subject= /DC=org/DC=python/CN=foo/CN=bar
> % openssl x509 -subject -noout -in attachment-0003.crt
> subject= /DC=org/DC=python/CN=bar2/CN=foo2
Well, that's the same bug that John Nagle complains about.
This output is incorrect.
Regards,
> The hierarchy information does not appear to be preserved.
But it only appears so. OpenSSL does not know how to render it
properly (hence I say it is not very common in PKI), but they
started supporting that when generating certificates, with the
-multivalue-rdn option for req, and if you do
op
>> Ok. I think this will still not support multi-valued RDNs properly, but
>> those are uncommon in PKI.
>
> I'm not sure why not... Can you say more?
See the example certificates. If you get (('cn','a'),('email','b')),
you can't tell whether that's two single-valued RDNs in a DN,
or one multi-v
More succinctly:
% openssl x509 -subject -noout -in attachment-0002.crt
subject= /DC=org/DC=python/CN=foo/CN=bar
% openssl x509 -subject -noout -in attachment-0003.crt
subject= /DC=org/DC=python/CN=bar2/CN=foo2
%
Bill
___
Python-Dev mailing list
Pyth
>The DNs of these are structurally different, one being
>/DC=org/DC=python/CN=foo/CN=bar and the other
>/DC=org/DC=python/CN=foo2+CN=bar2
Ah, I see what you're driving at.
You can inspect them yourself by looking at the certs with openssl:
% openssl x509 -text -in attachment-0002.crt
Certificat
> > In any case, it certainly sounds to me as if there can be multiple
> > instances of AttributeTypeAndValue with the same "type" field in a
> > single Name. So I'll represent them as tuples, which will preserve
> > the order in which they occur in the certificate, and make the value
> > immutabl
On 9/5/07, "Martin v. Löwis" <[EMAIL PROTECTED]> wrote:
> > My build slave (http://www.python.org/dev/buildbot/trunk/x86%20XP%20trunk)
> > keeps failing because of a crash that appears to be in the bsddb
> > module. I assume the master deems the slave to be lost because it's
> > sitting there wait
> My build slave (http://www.python.org/dev/buildbot/trunk/x86%20XP%20trunk)
> keeps failing because of a crash that appears to be in the bsddb
> module. I assume the master deems the slave to be lost because it's
> sitting there waiting on me to make a choice on the "debug/abort"
> dialog box.
W
Neal Becker schrieb:
> Georg Brandl wrote:
>
>> Neal Becker schrieb:
>>> I'm interested in trying out new style (python 2.6) documentation. I see
>>> we're using docutils + sphinx?
>>>
>>> I did: svn co http://svn.python.org/projects/doctools/trunk/
>>>
>>> How can I install this to try it with
Georg Brandl wrote:
> Neal Becker schrieb:
>> I'm interested in trying out new style (python 2.6) documentation. I see
>> we're using docutils + sphinx?
>>
>> I did: svn co http://svn.python.org/projects/doctools/trunk/
>>
>> How can I install this to try it with python-2.5?
>
> What do you wa
Hi all,
My build slave (http://www.python.org/dev/buildbot/trunk/x86%20XP%20trunk)
keeps failing because of a crash that appears to be in the bsddb
module. I assume the master deems the slave to be lost because it's
sitting there waiting on me to make a choice on the "debug/abort"
dialog box.
I
Neal Becker schrieb:
> I'm interested in trying out new style (python 2.6) documentation. I see
> we're using docutils + sphinx?
>
> I did: svn co http://svn.python.org/projects/doctools/trunk/
>
> How can I install this to try it with python-2.5?
What do you want to try with Python 2.5?
If yo
I'm interested in trying out new style (python 2.6) documentation. I see
we're using docutils + sphinx?
I did: svn co http://svn.python.org/projects/doctools/trunk/
How can I install this to try it with python-2.5?
___
Python-Dev mailing list
Python-D
32 matches
Mail list logo
