• Files Changed
• Browse Source

- update to 40.0.2:
  * Fixed compilation when using LibreSSL 3.7.2.

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- update to 40.0.1:
  * Support for Python 3.6 is deprecated and will be removed in
    the next release.
  * Deprecated the current minimum supported Rust version (MSRV)
    of 1.48.0. In the next release we will raise MSRV to 1.56.0.
    Users with the latest ``pip`` will typically get a wheel
    and not need Rust installed
  * Deprecated support for OpenSSL less than 1.1.1d. The next
    release of ``cryptography`` will drop support for older versions.
  * Deprecated support for DSA keys in
    :func:`~cryptography.hazmat.primitives.serialization.load_s
    sh_public_key`
    and
    :func:`~cryptography.hazmat.primitives.serialization.load_s
    sh_private_key`.
  * Deprecated support for OpenSSH serialization in
    :class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAP
    ublicKey`
    and
    :class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAP
    rivateKey`.
  * Added support for parsing SSH certificates in addition to
    public keys with
    :func:`~cryptography.hazmat.primitives.serialization.load_s
    sh_public_identity`.
    :func:`~cryptography.hazmat.primitives.serialization.load_s
    sh_public_key` continues to support only public keys.
  * Added support for generating SSH certificates with
    :class:`~cryptography.hazmat.primitives.serialization.SSHCe
    rtificateBuilder`.

• Files Changed
• Browse Source

- update to 39.0.2:
  * Fixed a bug where the content type header was not properly
    encoded for PKCS7 signatures when using the ``Text`` option and
    ``SMIME`` encoding.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 39.0.0:
  * **BACKWARDS INCOMPATIBLE:** Support for OpenSSL 1.1.0 has been removed.
  Users on older version of OpenSSL will need to upgrade.
  * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.5. The new
  minimum LibreSSL version is 3.5.0. Going forward our policy is to support
  versions of LibreSSL that are available in versions of OpenBSD that are
  still receiving security support.
  * **BACKWARDS INCOMPATIBLE:** Removed the ``encode_point`` and
  ``from_encoded_point`` methods on
  :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicNumbers`,
  which had been deprecated for several years.
  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.public_bytes`
  and
  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.from_encoded_point`
  should be used instead.
  * **BACKWARDS INCOMPATIBLE:** Support for using MD5 or SHA1 in
  :class:`~cryptography.x509.CertificateBuilder`, other X.509 builders, and
  PKCS7 has been removed.
  * **ANNOUNCEMENT:** The next version of ``cryptography`` (40.0) will
    change
  the way we link OpenSSL. This will only impact users who build
  ``cryptography`` from source (i.e., not from a ``wheel``), and specify their
  own version of OpenSSL. For those users, the ``CFLAGS``, ``LDFLAGS``,
  ``INCLUDE``, ``LIB``, and ``CRYPTOGRAPHY_SUPPRESS_LINK_FLAGS`` environment
  variables will no longer be respected. Instead, users will need to
  configure their builds `as documented here`_.
  * Added support for disabling the legacy provider in OpenSSL 3.0.x
  * Added support for disabling RSA key validation checks when loading RSA
  keys via
  ~cryptography.hazmat.primitives.serialization.load_pem_private_key

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 38.0.1:
  * Fixed parsing TLVs in ASN.1 with length greater than 65535 bytes (typically
    seen in large CRLs).
  * Final deprecation of OpenSSL 1.1.0. The next release of ``cryptography``
    will drop support.
  * We no longer ship ``manylinux2010`` wheels. Users should upgrade to the
    latest ``pip`` to ensure this doesn't cause issues downloading wheels on
    their platform. We now ship ``manylinux_2_28`` wheels for users on new
    enough platforms.
  * Updated the minimum supported Rust version (MSRV) to 1.48.0, from 1.41.0.
    Users with the latest ``pip`` will typically get a wheel and not need Rust
    installed, but check :doc:`/installation` for documentation on installing a
    newer ``rustc`` if required.
  * :meth:`~cryptography.fernet.Fernet.decrypt` and related methods now accept
    both ``str`` and ``bytes`` tokens.
  * Parsing ``CertificateSigningRequest`` restores the behavior of enforcing
    that the ``Extension`` ``critical`` field must be correctly encoded DER. See
    `the issue <https://github.com/pyca/cryptography/issues/6368>`_ for complete
    details.
  * Added two new OpenSSL functions to the bindings to support an upcoming
    ``pyOpenSSL`` release.
  * When parsing :class:`~cryptography.x509.CertificateRevocationList` and
    :class:`~cryptography.x509.CertificateSigningRequest` values, it is now
    enforced that the ``version`` value in the input must be valid according to
    the rules of :rfc:`2986` and :rfc:`5280`.
  * Using MD5 or SHA1 in :class:`~cryptography.x509.CertificateBuilder` and
    other X.509 builders is deprecated and support will be removed in the next
    version.
  * Added additional APIs to
    :class:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp`, including

• Files Changed
• Browse Source

- update to 37.0.4:
  * updated wheels to b ecompiled against openssl 3.0.5

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 37.0.2:
  * Fixed an issue where parsing an encrypted private key with the public
    loader functions would hang waiting for console input on OpenSSL 3.0.x rather
    than raising an error.
  * Restored some legacy symbols for older ``pyOpenSSL`` users. These will be
    removed again in the future, so ``pyOpenSSL`` users should still upgrade
    to the latest version of that package when they upgrade ``cryptography``.
  * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.2.
  * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL 2.9.x and 3.0.x.
    The new minimum LibreSSL version is 3.1+.
  * **BACKWARDS INCOMPATIBLE:** Removed ``signer`` and ``verifier`` methods
    from the public key and private key classes. These methods were originally
    deprecated in version 2.0, but had an extended deprecation timeline due
    to usage. Any remaining users should transition to ``sign`` and ``verify``.
  * Deprecated OpenSSL 1.1.0 support. OpenSSL 1.1.0 is no longer supported by
    the OpenSSL project. The next release of ``cryptography`` will be the last
    to support compiling with OpenSSL 1.1.0.
  * Deprecated Python 3.6 support. Python 3.6 is no longer supported by the
    Python core team. Support for Python 3.6 will be removed in a future
    ``cryptography`` release.
  * Deprecated the current minimum supported Rust version (MSRV) of 1.41.0.
    In the next release we will raise MSRV to 1.48.0. Users with the latest
    ``pip`` will typically get a wheel and not need Rust installed, but check
    :doc:`/installation` for documentation on installing a newer ``rustc`` if
    required.
  * Deprecated
    :class:`~cryptography.hazmat.primitives.ciphers.algorithms.CAST5`,
    :class:`~cryptography.hazmat.primitives.ciphers.algorithms.SEED`,
    :class:`~cryptography.hazmat.primitives.ciphers.algorithms.IDEA`, and
    :class:`~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish` because

• Files Changed
• Browse Source

  - drops CVE-2020-36242-buffer-overflow.patch on older dists
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists

• Files Changed
• Browse Source

- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):

• Files Changed
• Browse Source

- update to 3.3.2 (bsc#1182066, CVE-2020-36242):
- update to 3.2 (bsc#1178168, CVE-2020-25659):

• Files Changed
• Browse Source

- update to 36.0.2:
  * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1n.

• Files Changed
• Browse Source

- split tests in a multibuild variant to optimize rebuild time a bit

• Files Changed
• Browse Source

- update to 36.0.1:
  * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1m.

• Files Changed
• Browse Source