File python-pysaml2.changes of Package python-pysaml2

Overview Repositories Revisions Requests Users Attributes Meta

File python-pysaml2.changes of Package python-pysaml2 (Revision 3b4cf16edda0c019f5a7c25afbecc0f0)

Currently displaying revision 3b4cf16edda0c019f5a7c25afbecc0f0 , Show latest

-------------------------------------------------------------------
Thu Apr  7 08:37:47 UTC 2022 - pgajdos@suse.com

- version update to 7.1.2
  ## 7.1.2 (2022-03-04)
  - fix assertion policy filter to try to resolve the local_name using the friendly name if it failed with the name_format
  - reload metadata in-place to avoid memory leak
  - tests: Restrict pymongo to v3
  - docs: highlight installation command
  ## 7.1.1 (2022-02-22)
  - Process and verify the metadata signature for EntitiesDescriptor and EntityDescriptor
  - Fix client to be able to retry creating an AuthnRequest with a different binding
  - Allow requested_authn_context to be an object
  - AttributeValues are optional; allow Attributes to not have values
  - Update SWAMID entity category to support https://myacademicid.org/entity-categories/esi
  - Fix signing for requests with the SOAP binding
  - tests: new test case for signed SOAP LogoutRequests
  - docs: document the metadata node_name option for the remote source
  - examples: align with latest updates
  - deps: declare setuptools as a requirement for processing the package version
  - build: add python 3.9 and 3.10 to classifiers
  - misc: linter fixes
  ## 7.1.0 (2021-11-16)
  - Fix signature verification for the redirect binding for AuthnRequest and
    LogoutRequest.
  - Include encryption KeyName in encrypted assertions.
  - Add "reason" field in invalid signature errors due to invalid document format.
  - New SP configuration option requested_authn_context to set the preferred
    RequestedAuthnContext class reference.
  - Add support for metadata refresh by adding a metadata_reload method into saml2.Entity.
    This method is to be externally invoked, and to receive the same metadata
    configuration as what was passed under the metadata key to saml2.Config. The method
    loads a new metadata configuration and swaps it in (replacing the references across
    several objects that hold a metadata reference).
  - Fix SessionIndex resolution during logout.
  - Fix AuthnResponse::get_subject to be able to decrypt a NameID with the given keys.
  - Refactor AuthnResponse::authn_info to consider DeclRef equivalent to ClassRef.
  - Ensure creation of multiple ePTIDs is handled correctly.
  - Improve signature checks by ensuring the Object element is absent, enforcing allowed
    transform aglorithms, enforcing allowed canonicalization methods and requiring the
    enveloped-signature transform to be present.
  - mdstore: Make unknown metadata extensions available through the internal metadata.
  - mdstore: Fix the exception handler of the InMemoryMetaData object.
  - mdstore: Fix the serialization of the MetadataStore object.
  - examples: Fix code to catter changes in interfaces.
  - examples: Update certificates to avoid SSL KEY TO SMALL errors.
  - docs: Significant improvement on the configuration options documentation.
  - docs: Fix typos.
- python-mock is not required for build

-------------------------------------------------------------------
Fri Jul  2 20:25:49 UTC 2021 - Michael Ströder <michael@stroeder.com>

- removed obsolete 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch
- Update to 7.0.1:
  * 7.0.1 (2021-05-20)
    - Preserve order of response bindings on IdP-initiated logout
    - Fix use of expected binding on SP logout
  * 7.0.0 (2021-05-18)
    - **BREAKING** Replace encryption method rsa-1_5 with rsa-oaep-mgf1p
    - Add documentation next to the code
  * 6.5.2 (2021-05-18)
    - Add shibmd_scopes metadata extractor
    - Allow the Issuer element on a Response to be missing
    - Respect the preferred_binding configuration for the single_logout_service
    - Fix logout signature flags for redirect, post and soap requests
    - Respect the logout_requests_signed configuration option
    - Fix crash when applying policy on RequestedAttribute without a friendlyName
    - Correctly validate IssueInstant
    - Correctly handle AudienceRestriction elements with no value
    - Raise InvalidAssertion exception when assertion requirements are not met
    - Raise SAMLError on failure to parse a metadata file
    - Raise StatusInvalidAuthnResponseStatement when the AuthnStatement is not valid
    - Handle all forms of ACS endpoint specifications
    - tests: Always use base64.encodebytes; base64.encodestring has been dropped
    - build: Set minimum version needed for xmlschema
    - docs: Update Travis CI badge from travis-ci.org to travis-ci.com
    - examples: Fix example code

-------------------------------------------------------------------
Mon Apr 26 12:55:01 UTC 2021 - Dirk Müller <dmueller@suse.com>

- add 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch

-------------------------------------------------------------------
Mon Jan 25 15:06:45 UTC 2021 - Dirk Müller <dmueller@suse.com>

- update requires

-------------------------------------------------------------------
Wed Jan 20 23:41:54 UTC 2021 - Michael Ströder <michael@stroeder.com>

- Update to 6.5.1:
  * Fix the parser to take into account both the xs and xsd namespace prefixes

-------------------------------------------------------------------
Wed Jan 20 20:12:26 UTC 2021 - Michael Ströder <michael@stroeder.com>

- Update to 6.5.0 - Security release
  * Fix processing of invalid SAML XML documents - CVE-2021-21238
  * Fix unspecified xmlsec1 key-type preference - CVE-2021-21239
  * Add more tests regarding XSW attacks
  * Add XML Schemas for SAML2 and common extensions
  * Fix the XML parser to not break on ePTID AttributeValues
  * Fix the initialization value of the return_addrs property of the StatusResponse object
  * Fix SWAMID entity-category policy regarding eduPersonTargetedID
  * data: use importlib to load package data (backwards compatibility through the importlib_resources package)
  * docs: improve the documentation for the signing_algorithm and digest_algorithm options
  * examples: fix the logging configuration of the example-IdP
  * tests: allow tests to pass on 32bit systems by properly choosing dates in test XML documents
  * tests: improvements on the generation of response and assertion objects
  * tests: expand tests on python-3.9 and python-3.10-dev
- added new build dependencies:
  * python3-importlib-resources
  * python3-xmlschema
  * update-alternatives
- removed obsolete avoid-too-large-dates.patch
- replaced %python3_alternative by %python_alternative

-------------------------------------------------------------------
Wed Jan  6 10:49:48 UTC 2021 - Matej Cepl <mcepl@suse.com>

- Add avoid-too-large-dates.patch to avoid test failures on i586
  (Y38K bug; gh#IdentityPython/pysaml2#759)

-------------------------------------------------------------------
Mon Jan  4 21:25:04 UTC 2021 - Matej Cepl <mcepl@suse.com>

- Skip test test_filter_ava_registration_authority_1
  (gh#IdentityPython/pysaml2#759).

-------------------------------------------------------------------
Sun Dec 20 10:04:41 UTC 2020 - Dirk Müller <dmueller@suse.com>

- update to 6.3.1:
  - Fix extraction of RegistrationInfo when no information is available
  - Fix http_info struct to include status-code
  - Allow to specify policy configurations based on the registration authority.
  - Add new configuration option `logout_responses_signed` to sign logout responses.
  - When available and appropriate return the ResponseLocation along with the Location
    attribute.
  - Always use base64.encodebytes; base64.encodestring has been dropped.
  - Examples: fix IdP example that was outputing debug statements on stdout that became
    part of its metadata.
  - CI/CD: Use Ubuntu bionic as the host to run the CI/CD process.
  - CI/CD: Pre-releases are now available on [test.pypi.org][pypi.test.pysaml2]. Each
    commit/merge on the master branch autotically creates a new pre-release. To install a
    prelease, run:
  - Fix the generated xsd:ID format for EncryptedData and EncryptedKey elements
  - Set the default value for the NameFormat attribute to unspecified when parsing
  - Support arbitrary entity attributes
  - Replace all asserts with proper checks
  - Allow request signing in artifact2message
  - Support logging configuration through the python logger
  - Fix wrong identifiers for ecdsa algos
  - Fix automatic inversion of attribute map files
  - Factor out common codepaths in attribute_converter
  - Remove uneeded exception logging
  - Docs: Update configuration options documentation
  - Examples: Support both str and bytes in SAML requests on the example idp
  - Examples: Update to key generation to 2048 bits

-------------------------------------------------------------------
Sat Jul 11 18:07:25 UTC 2020 - Michael Ströder <michael@stroeder.com>

- update to 6.1.0:
  * Fix signed logout requests flag
  * Differentiate between metadata NameIDFormat and AuthnRequest NameIDPolicy Format
    - Users using `name_id_format` to set the `<NameIDPolicy Format="...">` attribute now
      need to use the new configuration option `name_id_policy_format`.
  * Fix documentation formatting
  * Fix generation of signed metadata
  * Add attribute mappings used by SwedenConnect (DIGG, INERA and PKIX specifications)
  * Update SWAMID entity category
  * Document the `additional_cert_files` configuration option

-------------------------------------------------------------------
Fri Jul 10 12:29:12 UTC 2020 - Dirk Mueller <dmueller@suse.com>

- update to 5.3.0:
  - Fix check for nameid_format set to the string "None" in the configuration
  - Fix presence of empty eIDAS RequestedAttributes element on AuthnRequest
  - Refactor create_authn_request method to be easier to reason about
  - Fix NameIDPolicy checks for allowed Format and allowCreate values

-------------------------------------------------------------------
Sun Jun 14 08:57:41 UTC 2020 - Dirk Mueller <dmueller@suse.com>

- update to 5.1.0:
  - support eIDAS RequestedAttributes per AuthnRequest
  - fix xmlsec1 --id-attr configuration option value
  - do not remove existing disco URL query params
  - load attribute maps in predictable order
  - better error message when AudienceRestriction does not validate
  - always use base64.encodebytes instead of base64.encodestring
  - update the eIDAS attribute mapping for legal person
  - fix py_compile warnings
  - fix pylint errors and warnings
  - various small fixes
  - add Python3.8 as supported
  - tests: fix validity dates
  - docs: document default value for 'want_response_signed'

-------------------------------------------------------------------
Tue May  5 12:50:42 UTC 2020 - Matej Cepl <mcepl@suse.com>

- Don't use %python3_only command, but properly use alternatives.
- Skip failing tests on i586 (gh#IdentityPython/pysaml2#682)

-------------------------------------------------------------------
Sat Mar 14 15:57:25 UTC 2020 - Dirk Mueller <dmueller@suse.com>

- update to 5.0.0:
  - Fix XML Signature Wrapping (XSW) vulnerabilities - CVE-2020-5390
  - Add freshness period feature for MetaDataMDX
  - Fix bug in duration calculation in time_util library
  - Fix ipv6 validation to accommodate for addresses with brackets
  - Fix xmlsec temporary files deletions
  - Add method to get supported algorithms from metadata
  - Add mdstore method to extract assurance certifications
  - Add mdstore method to extract contact_person data
  - Add attribute mappings from the Swiss eduPerson Schema
  - Make AESCipher and Fernet interfaces compatible
  - Remove deprecated saml2.aes module
  - Remove deprecated saml2.extensions.ui module
  - Replace deprecated mongodb operations
  - Rename ToOld error to TooOld
  - Fix pytest warnings
  - Mock tests that need a network connection
  - Start dropping python2 support
  - Add mdstore methods to extract mdui uiinfo elements
  - Add attribute mapping for umbrellaID attributes
  - Fix logic error in pick_binding method for Entity class
  - Validate the audience of assertions regardless of a response being unsolicited
  - Fix PKCS_9 saml_url prefix
  - docs: Fix warnings from docs generation
  - docs: Update release instructions regarding branch releases
  - docs: Fix list formatting on IdP example page
  - docs: Update pysaml2 options doc with `name_id_format_allow_create`
  - misc: fix various typos
  
-------------------------------------------------------------------
Tue Jan  7 11:37:57 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>

- Use python dbm dependency instead of legacy gdbm

-------------------------------------------------------------------
Mon Jul 22 14:57:53 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>

- Update to 4.8.0:
  * Refactor the way ForceAuthn is set: check for "true" and "1"
  * Allow to set NameQualifier and SPNameQualifier attributes for ePTID
  * Parse assertions with Holder-of-Key profile
  * Add created_at timestamps to all mongodb documents
  * Look for existing persistent id's before creating new ones
  * Do not add AllowCreate property for default transient NameID
  * Enable entity category import from module search path
  * Add SAML subject identifier attributes to saml2_uri attributemap
  * Fix deprecation warning regarding the cgi module - use the html module when available
  * Misc minor improvements
  * tests: Be compatible with latest pytest
  * tests: Make tests pass after 2024
  * tests: Add py37 as a test target
  * docs: Correct instructions to run tests
  * docs: Fix misc typos

-------------------------------------------------------------------
Wed Jun  5 09:39:57 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>

- Update to 4.7.0
  * Add support for MDQ signature verification
  * Raise XmlsecError if xmlsec1 operations do not succeed
  * Handle non standard response error status codes correctly
  * Remove the python-future dependency and only use six

-------------------------------------------------------------------
Fri Dec  7 10:43:13 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>

- Update to 4.6.5:
  * Many many changes everywhere, see CHANGELOG.md for details
- Use github tarball to include license/tests

-------------------------------------------------------------------
Tue Dec  4 12:52:47 UTC 2018 - Matej Cepl <mcepl@suse.com>

- Remove superfluous devel dependency for noarch package

-------------------------------------------------------------------
Wed Oct 10 06:08:56 UTC 2018 - Dirk Mueller <dmueller@suse.com>

- cleanup filelist

-------------------------------------------------------------------
Tue Oct  9 15:50:52 UTC 2018 - Colleen Murphy <comurphy@suse.com>

- Replace python-pycryptodomex dep with python-cryptography
  - Dependency was swapped in afdf5b4

-------------------------------------------------------------------
Wed Nov 29 08:25:34 UTC 2017 - okurz@suse.com

- Add missing runtime dependency on 'defusedxml'
- Add obsolete suse_version special handling

-------------------------------------------------------------------
Mon Oct 30 22:27:36 UTC 2017 - michael@stroeder.com

- update to 4.5.0

-------------------------------------------------------------------
Mon Jun 19 08:57:42 UTC 2017 - okurz@suse.com

- Convert to singlespec

-------------------------------------------------------------------
Tue Nov 22 15:18:26 UTC 2016 - dmueller@suse.com

- fix requires

-------------------------------------------------------------------
Thu Nov 17 14:42:09 UTC 2016 - michael@stroeder.com

- update to 4.4.0
- added LICENSE.txt to docs

-------------------------------------------------------------------
Fri Feb 26 13:14:29 UTC 2016 - tbechtold@suse.com

- Require python-python-dateutil. package was renamed

-------------------------------------------------------------------
Tue Oct 13 21:31:03 UTC 2015 - dmueller@suse.com

- add pycrypto/pyOpenSSL dependency

-------------------------------------------------------------------
Tue Sep  1 07:17:52 UTC 2015 - tbechtold@suse.com

- Move python-repoze.who from Recommends to Requires. It's needed.

-------------------------------------------------------------------
Thu Jul 30 19:30:53 UTC 2015 - tbechtold@suse.com

- Add missing Requires

-------------------------------------------------------------------
Thu Jul 16 15:40:39 UTC 2015 - seife+obs@b1-systems.com

- fix build on non-SUSE distributions whose rpm does not know
  "Recommends"

-------------------------------------------------------------------
Wed Jun 10 08:48:46 UTC 2015 - dmueller@suse.com

- update to 2.4.0:
  * A couple of security fixes plus maintenance updates.

-------------------------------------------------------------------
Tue Oct 15 07:41:04 UTC 2013 - speilicke@suse.com

- Initial version

Places

File python-pysaml2.changes of Package python-pysaml2 (Revision 3b4cf16edda0c019f5a7c25afbecc0f0)

Places