support for PKCS7_NO_VERIFY in test_support.pkcs7_verify

.gitignore

@@ -16,3 +16,4 @@ target/
 .rust-cov/
 *.lcov
 *.profdata
+venv

.vscode/settings.json

@@ -0,0 +1,7 @@
+{
+    "python.testing.pytestArgs": [
+        "tests"
+    ],
+    "python.testing.unittestEnabled": false,
+    "python.testing.pytestEnabled": true
+}

src/cryptography/hazmat/primitives/serialization/pkcs7.py

@@ -43,6 +43,7 @@ class PKCS7Options(utils.Enum):
     NoCapabilities = "Don't embed SMIME capabilities"
     NoAttributes = "Don't embed authenticatedAttributes"
     NoCerts = "Don't embed signer certificate"
+    NoVerify = "Don't verify the signers certificate of a signed message"
 
 
 class PKCS7SignatureBuilder:

src/rust/src/test_support.rs

@@ -81,6 +81,9 @@ fn pkcs7_verify(
     if options.contains(types::PKCS7_TEXT.get(py)?)? {
         flags |= openssl::pkcs7::Pkcs7Flags::TEXT;
     }
+    if options.contains(types::PKCS7_NO_VERIFY.get(py)?)? {
+        flags |= openssl::pkcs7::Pkcs7Flags::NOVERIFY;
+    }
 
     let store = {
         let mut b = openssl::x509::store::X509StoreBuilder::new()?;

src/rust/src/types.rs

@@ -350,6 +350,12 @@ pub static PKCS7_DETACHED_SIGNATURE: LazyPyImport = LazyPyImport::new(
     &["PKCS7Options", "DetachedSignature"],
 );
 
+#[cfg(not(CRYPTOGRAPHY_IS_BORINGSSL))]
+pub static PKCS7_NO_VERIFY: LazyPyImport = LazyPyImport::new(
+    "cryptography.hazmat.primitives.serialization.pkcs7",
+    &["PKCS7Options", "NoVerify"],
+);
+
 pub static SMIME_ENVELOPED_ENCODE: LazyPyImport = LazyPyImport::new(
     "cryptography.hazmat.primitives.serialization.pkcs7",
     &["_smime_enveloped_encode"],