Comments (2)
I agree on this topic.
In addition it would be really important to export an API to allow to inizialize the DH object by using a string.
This is a requirement in order to be able to create and use DH parameters in RAM without using the file system or eventually to use parameters stored in a different way (e.g. with a DB).
Right now this is not possible and the user in order to load a parameter has forcefully to create a file and load from it.
The following code could be used as reference, and uses tempfile that allow to create temportary files
import tempfile
def load_dh_from_string(ctx, dhparam):
# self is a context object
temp = tempfile.NamedTemporaryFile()
temp.write(self.dh)
temp.flush()
ctx.load_tmp_dh(temp.name)
temp.close()
from pyopenssl.
FFDH is bad and we're trying hard not to extend our APIs anyways.
from pyopenssl.
Related Issues (20)
- pyopenssl-23.3.0 is incompatible with the latest cryptography 42.0.0
- [docs] Use Furo?
- TLS 1.3 Session Resumption with PSKs in pyopenssl? HOT 1
- RFE: is it possible to start making github releases?π€ HOT 2
- Support for `cryptography.X509.Extensions` in `pyopenssl.X509.add_extensions` etc? HOT 2
- 24.1.0: pytest fails in 3 units and some pytest warnings HOT 12
- 24.1.0: sphinx warnings `reference target not found` HOT 1
- CVE-2023-6129 Safety vulnerability HOT 1
- Some X509 Tests fail on v24.1.0 HOT 1
- Add SSL_OP_CLEANSE_PLAINTEXT to exported set of options
- Use of a Broken or Risky Cryptographic Algorithm [Snyk Vulnerability] HOT 1
- expose `SSL_set_info_callback` (i.e. `Connection.set_info_callback`)
- X.509Name.get_components() doesn't process Subject values like X.509Name.__getattr__() does with Unicode strings. HOT 1
- x509.sign does not work for Ed25519 keys (digest must be NULL) HOT 1
- CVE-2024-4741 HOT 1
- How to decrypt openSSL PKCS#7 HOT 2
- Deprecate/remove all non-SSL APIs in pyOpenSSL
- sect163k1 is not appearing in the ClientHello message
- Issue with DTLS: Unable to Achieve Handshake Between Client and Serve
- Issue with Handling Invalid or Malformed TLS/DTLS Handshake Messages
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pyopenssl.