- Aug 04, 2015
-
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
- Jul 28, 2015
-
-
Eli Collins authored
(fixes issue 58) --HG-- branch : stable
-
- Jul 26, 2015
-
-
Eli Collins authored
default rounds values. serves me right for tweaking the default rounds *after* a release. --HG-- branch : stable
-
- Jul 25, 2015
-
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
- Jul 23, 2015
-
-
Eli Collins authored
--HG-- branch : stable
-
- Jul 22, 2015
-
-
Eli Collins authored
environments, otherwise the others ones confusingly get the wrong django source. --HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
for full integration tests to run in this case, user has to provide path to django source as $PASSLIB_TESTS_DJANGO_SOURCE_PATH. should match version of django being tested. --HG-- branch : stable
-
- Jul 21, 2015
-
-
Eli Collins authored
able to handle non-utf8 passwords. only coming up now because bcrypt's os_crypt fallback can now fail for such inputs. --HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
but with some additional updates. needs to be merged back. --HG-- branch : stable
-
Eli Collins authored
bcrypt ------ * added support & UT for $2b$ hash format. not making it the default yet, for backward compat. * large refactor of how bcrypt backends are loaded: instead of per-backend workarounds within each _calc_checksum_<backend>() function: now using runtime detection of specific capabilities & workarounds, that runs whenever set_backend() is called, combined with consolidated workaround code within _calc_checksum(), controlled by the flags set by set_backend(). this detection now looks for: - the 8bit bug: throws a PasslibSecurityError - the wraparound bug: issues warning, sets flag enabling a workaround. - support for 2/2y/2b: if backend lacks support for particular variants, sets flag enabling workaround to add support. * os_crypt backend now just issues error if it can't handle a password encoding; rather than trying fallbacks first -- edge case anyways, and likely to not have any fallbacks when it does happen. simplifies backend code. * added UTs to make sure wraparound-vulnerable passwords are hashed correctly (as a 72char string, not a 1-3 char string that's repeated). * internal blowfish code's ident parsing clarified. other ----- * added exc.PasslibSecurityError for fatal runtime errors. * test framework: os_crypt backends no longer expected to use *any* backend as fallback, just ones with lower priority than os_crypt. * test framework: crypt_stub() wrapper now subclasses the handler, so it can use an independant backend, instead of changing global backend for duration of call (made parallel testing hard) docs ---- * added entry to bcrypt page, writing down wraparound bug details, and how passlib is handling it. * all versions of pybcrypt & bcryptor seem to be vulnerable to wraparound bug. starting process of deprecating these backends: marked bcrypt backend as 'preferred' throughout the documentation. --HG-- branch : stable
-
- Jul 20, 2015
-
-
Eli Collins authored
also added default_scheme="portable" to ease transition to passlib 1.7's new default behavior. --HG-- branch : stable
-
Eli Collins authored
* test_registry wasn't cleaning itself up correctly, would cause false errors if run w/ the nose 'randomize' plugin * test_registry now handles bcrypt being unavailable. --HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
updated logic to correctly handle bcrypt 2.0 (and hopefully be more future proof). fixes issue 56. --HG-- branch : stable
-
- Jan 25, 2015
-
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
``isinstance(xxx, native_string_types)`` checks, to handle str or unicode under py2. this should explicitly take care of issue 54, but not closing that until checking deeper into the unicode handling. should allow str/unicode anywhere the inputs are program values (e.g. config options), not user-provided values. --HG-- branch : stable
-
Eli Collins authored
make_password()'s salt parameter on to the hash (fixes issue 52). old behavior would incorrectly pass explicit salt provided for hash that didn't need one; a situation that only occurs in django 1.4.0-1.4.5's unittests, and was corrected in django 1.4.6's. new behavior separates out a couple of the cases we were trying to handle, handles them separately, has better comment explaining what's going on. --HG-- branch : stable
-
- Jan 11, 2015
-
-
Eli Collins authored
--HG-- branch : stable
-
- Dec 04, 2014
-
-
Michael P. Jung authored
(grafted from e9ab0efde79b) --HG-- branch : stable
-
- Dec 28, 2013
-
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
test_ext_django: fix spurious error if django 1.6 installed but not bcrypt; added tox case to catch it also --HG-- branch : stable
-
- Dec 27, 2013
-
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
massive cleanup of documentation typos, thanks to Thomas Waldmann (issue 27, comment 7) (transplant of r1f5b8860b743 from default branch) --HG-- branch : stable
-
- Dec 26, 2013
-
-
Eli Collins authored
--HG-- branch : stable
-
Eli Collins authored
--HG-- branch : stable
-