Merge pull request #14 from njsmith/appveyor

[ci] attempt to add appveyor support

appveyor.yml

@@ -0,0 +1,25 @@
+skip_tags: true
+
+os: Visual Studio 2015
+
+environment:
+  matrix:
+    - PYTHON: "C:\\Python27"
+    - PYTHON: "C:\\Python27-x64"
+    - PYTHON: "C:\\Python36"
+    - PYTHON: "C:\\Python36-x64"
+
+build_script:
+  - "SET PATH=%PYTHON%;%PYTHON%\\Scripts;;%PATH%"
+  - "python --version"
+  - "python -c \"import struct; print(struct.calcsize('P') * 8)\""
+  - "pip install ."
+  - "pip install -Ur test-requirements.txt"
+  - "pip install codecov"
+
+test_script:
+  # This is pretty lazy -- we don't go into an empty dir or anything.
+  # I think pytest will test the installed version? But I dunno the
+  # coverage will actually work right if just given as "trustme"
+  - "python -u -m pytest -W error -ra -v -s tests --cov=trustme --cov=tests --cov-config=.coveragerc"
+  - "codecov -F windows"

ci/travis.sh

@@ -23,5 +23,5 @@ else
     pytest -W error -ra -s ../tests --cov="$INSTALLDIR" --cov=../tests --cov-config="../.coveragerc"
 
     pip install codecov
-    codecov
+    codecov -F $(uname | tr A-Z a-z)
 fi

newsfragments/10.bug

@@ -0,0 +1 @@
+Don't crash on Windows

newsfragments/11.misc

@@ -0,0 +1 @@
+Test on Windows

trustme/__init__.py

@@ -1,3 +1,5 @@
+# -*- coding: utf-8 -*-
+
 import datetime
 import ssl
 from base64 import urlsafe_b64encode
@@ -41,18 +43,16 @@ def _smells_like_pyopenssl(ctx):
 
 
 def _cert_builder_common(subject, issuer, public_key):
-    today = datetime.datetime.today()
-    yesterday = today - datetime.timedelta(1, 0, 0)
-    forever = today.replace(year=today.year + 1000)
     return (
         x509.CertificateBuilder()
         .subject_name(subject)
         .issuer_name(issuer)
         .public_key(public_key)
-        # This is inclusive so today should work too, but let's pad it a
-        # bit.
-        .not_valid_before(yesterday)
-        .not_valid_after(forever)
+        .not_valid_before(datetime.datetime(2000, 1, 1))
+        # OpenSSL on Windows freaks out if you try to give it a date after
+        # ~3001-01-19
+        # https://github.com/pyca/cryptography/issues/3194
+        .not_valid_after(datetime.datetime(3000, 1, 1))
         .serial_number(x509.random_serial_number())
         .add_extension(
             x509.SubjectKeyIdentifier.from_public_key(public_key),