Add support for fetching Certificate Transparency SCTs over a TLS extension

third_party/tlslite/tlslite/constants.py

 """Constants used in various places."""
 
 class CertificateType:
     x509 = 0
     openpgp = 1
     cryptoID = 2
 
 class ClientCertificateType:
     rsa_sign = 1
     dss_sign = 2
@@ skipping 14 matching lines @@
     encrypted_extensions = 203
 
 class ContentType:
     change_cipher_spec = 20
     alert = 21
     handshake = 22
     application_data = 23
     all = (20,21,22,23)
 
 class ExtensionType:
+    signed_cert_timestamps = 18  # signed_certificate_timestamp extension

[wtc, 2013/11/26 17:32:55]

This constant has a self-explanatory name, so it doesn't seem to need a comment.
Did you add the comment with the unabbreviated extension name so that people can
find it when doing a source code search? Just wondering.

To me, a reference to RFC 6962 would be useful.

[ekasper, 2013/11/26 19:33:54]

Yep, to map to the official name. Added a reference.

     channel_id = 30031
 
 class AlertLevel:
     warning = 1
     fatal = 2
 
 class AlertDescription:
     """
     @cvar bad_record_mac: A TLS record failed to decrypt properly.
 
@@ skipping 181 matching lines @@
         badA: "bad A",\
         badIdentifier: "bad identifier",\
         badSharedKey: "bad sharedkey",\
         badPremasterPadding: "bad premaster padding",\
         shortPremasterSecret: "short premaster secret",\
         badVerifyMessage: "bad verify message",\
         badFinished: "bad finished message",\
         badMAC: "bad MAC",\
         badPadding: "bad padding"
         }