------------------------------------------------------------------- Mon Sep 22 10:38:11 UTC 2025 - Victor Zhestkov - Skip test failing due to tls1 disabled by default in Ubuntu 20.04 ------------------------------------------------------------------- Tue Jul 15 13:09:39 UTC 2025 - Victor Zhestkov - Move to build using wheel - Fix %check section to make it working - Avoid running the tests failing on RHEL 9 and 10 due to impossibility to use legacy crypto methods due to crypto policies ------------------------------------------------------------------- Fri May 9 11:39:56 UTC 2025 - Victor Zhestkov - Update to 0.45.1: * ci: switch from using sha1 to sha256. * ci(keys): regenerate rsa*.pem keys as well * fix: make the package compatible with OpenSSL >= 3.4 (don’t rely on LEGACY crypto-policies) * chore: package also system_shadowing directory to make builds more reliable - Update to 0.45.0: * chore: preparing 0.45.0 release * fix(lib,ssl): rewrite ssl_accept, ssl_{read,write}_nbio for better error handling * fix: replace m2_PyBuffer_Release with native PyBuffer_Release * chore: build Windows builds with Python 3.13 as well * fix: remove support for Engine * chore: use actual license of the project * ci(Debian): make M2Crypto buildable on Debian (bsc#1240965) * swig: Workaround for reading sys/select.h ending with wrong types * ci: bump required setuptools version because of change in naming strategy * fix: add fix for build with older GCC * fix: remove AnyStr and Any types - Remove the patch adding compatibility with old GCC. - Modified: * remove-parameterized-tests.patch - Removed: * make-compatible-with-old-gcc.patch ------------------------------------------------------------------- Tue Feb 25 13:01:43 UTC 2025 - Victor Zhestkov - Make new version compatible with old gcc. - Added: * make-compatible-with-old-gcc.patch ------------------------------------------------------------------- Tue Feb 25 11:05:35 UTC 2025 - Victor Zhestkov - Add rpmlintrc … overflow of ignorable rpmlint warnings caused not to see the previous problem. - Update to 0.44.0: * fix(rsa): introduce internal cache for rsa.check_key() (bsc#1236664, srht#mcepl/m2crypto#369) * fix[authcookie]: modernize the module * fix(_lib): add missing #include for windows * ci: relax fedora crypto policy to legacy. * enhance setup.py for macos compatibility * prefer packaging.version over distutils.version * fix segfault with openssl 3.4.0 * fix[ec]: raise ioerror instead when load_key_bio() cannot read the file. * doc: update installation instructions for windows. * fix setting x509.verify_* variables * fix building against openssl in non-standard location * test_x509: use only x509_version_1 (0) as version for csr. - The real license is BSD-2-Clause, not MIT. - Update to 0.43.0: * feat[m2]: add m2.time_t_bits to checking for 32bitness. * fix[tests]: Use only X509_VERSION_1 (0) as version for CSR. * fix[EC]: raise ValueError when load_key_bio() cannot read the file (bsc#1231589). * ci: use -mpip wheel instead of -mbuild * fix: use PyMem_Malloc() instead of malloc() * fix[hints]: more work on conversion of type hints to the py3k ones * fix: make the package build even on Python 3.6 * ci[local]: skip freezing local tests * fix[hints]: remove AnyStr type * test: add suggested test for RSA.{get,set}_ex_data * fix: implement interfaces for RSA_{get,set}_ex_new_{data,index} * fix: generate src/SWIG/x509_v_flag.h to overcome weaknesses of swig * fix: replace literal enumeration of all VERIFY_ constants by a cycle * test: unify various test cases in test_ssl related to ftpslib * fix: replace deprecated url keyword in setup.cfg with complete project_urls map - Update 0.42.0: * allow ASN1_{Integer,String} be initialized directly * minimal infrastructure for type hints for a C extension and some type hints for some basic modules * time_t on 32bit Linux is 32bit (integer) not 64bit (long) * EOS for CentOS 7 * correct checking for OpenSSL version number on Windows * make compatible with Python 3.13 (replace PyEval_CallObject with PyObject_CallObject) * fix typo in extern function signature (and proper type of engine_ctrl_cmd_string()) * move the package to Sorucehut * setup CI to use Sourcehut CI * setup CI on GitLab for Windows as well (remove Appveyor) * initial draft of documentation for migration to pyca/cryptography * fix Read the Docs configuration (contributed kindly by Facundo Tuesca) - Remove saltbundlepy-m2crypto.keyring, because PyPI broke GPG support - Disable broken tests with openssl 3.2, bsc#1217782 - Update to 0.40.0: * OK, SO NOT THIS RELEASE, BUT IN THE NEXT RELEASE PYTHON2 WILL TRULY GO! BREAKING CHANGES: * There are no SWIG generated files (src/SWIG/_m2crytpo_wrap.c) included anymore, so swig must be installed, no exceptions! Also, for compatibility with Python 3.12+, swig 4.0+ is required. * All support for asyncore has been removed, as it has been removed in Python 3.12 as well (which means also removal of contrib/dispatcher.py, M2Crypto/SSL/ssl_dispatcher.py, ZServerSSL). * All use of distutils (including the bundled ones in setuptools) has been removed, so `setup.py clean` is no more. * Excessively complicated and error-prone __init__py has been cleaned and `import M2Crypto` doesn’t include everything anymore. Imports should specified as for example with `from M2Crypto import foo`. OTHER CHANGES: * ASN1_Time handling has been mostly rewritten and it almost works even on Windows. * All tests in Gitlab CI (with exceptions of some skipped tests especially on Windows) are now green, tests of Python 2.7 on CentOS 7 have been included. * Introduce m2.err_clear_error() * Make X509_verify_cert() accessible as m2.x509_verify_cert - Update to 0.39.0: * SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE COMPLETELY REMOVED IN THE NEXT RELEASE. * Remove dependency on parameterized and use unittest.subTest instead. * Upgrade embedded six.py module to 1.16.0 (really tiny inconsequential changes). * Make tests working on MacOS again (test_bio_membuf: Use fork) * Use OpenSSL_version_num() instead of unrealiable parsing of .h file. * Mitigate the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657) * Add functionality to extract EC key from public key + Update tests * Worked around compatibility issues with OpenSSL 3.* * Support for Twisted has been deprecated (they have their own SSL support anyway). * Generate TAP while testing. * Stop using GitHub for testing. * Accept a small deviation from time in the testsuite (for systems with non-standard HZ kernel parameter). * Use the default BIO.__del__ rather tha overriding in BIO.File (avoid a memleak). * Resolve "X509_Name.as_der() method from X509.py -> class X509_Name caused segmentation fault" - Added: * m2crypto-0.44.0.tar.gz * saltbundlepy-m2crypto.rpmlintrc - Modified: * remove-parameterized-tests.patch - Removed: * M2Crypto-0.38.0.tar.gz * M2Crypto-0.38.0.tar.gz.asc * CVE-2020-25657-Bleichenbacher-attack.patch * saltbundlepy-m2crypto.keyring ------------------------------------------------------------------- Fri Mar 8 11:14:50 UTC 2024 - Victor Zhestkov - Adjust the requirements for building on SLE11. ------------------------------------------------------------------- Fri Aug 12 14:11:33 UTC 2022 - Victor Zhestkov - Add the fix, which mitigates the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657, bsc#1178829). - Add keyring to verify GPG signature of tarball. - Added: * CVE-2020-25657-Bleichenbacher-attack.patch * saltbundlepy-m2crypto.keyring ------------------------------------------------------------------- Fri May 27 13:57:30 UTC 2022 - Victor Zhestkov - Disable tests on package building for Ubuntu 20.04 and higher - Disable tests using parameterized module to prevent extra dependency - Remove not required patches to disable rsa and ssl tests - Added: * remove-parameterized-tests.patch - Removed: * test_rsa.patch * test_ssl.patch ------------------------------------------------------------------- Fri May 27 13:42:11 UTC 2022 - Victor Zhestkov - Update to 0.38.0 - Added: * M2Crypto-0.38.0.tar.gz * M2Crypto-0.38.0.tar.gz.asc - Removed: * M2Crypto-0.35.2.tar.gz * PyObject_GC_UNTRACK_fix.patch * test_x509_decodebytes_fix.patch ------------------------------------------------------------------- Mon Apr 4 11:33:05 UTC 2022 - Victor Zhestkov - Strictly require Python 3.10 with saltbundlepy requrement - Skip tests on SLE12 due to fails on building against SLE12 GA ------------------------------------------------------------------- Thu Feb 3 12:09:36 UTC 2022 - Victor Zhestkov - Fixed test_rsa test - Fixed test_ssl test - Fixed test_x509 test by using decodebytes instead of decodestring removed in Python 3.9 - Make PyObject_GC_UNTRACK compatible with Python 3.9 - Added: * test_rsa.patch * test_ssl.patch * test_x509_decodebytes_fix.patch * PyObject_GC_UNTRACK_fix.patch ------------------------------------------------------------------- Thu Jan 20 11:05:35 UTC 2022 - Victor Zhestkov - Require saltbundle-openssl-devel instead of openssl-devel for building on SLE12 to prevent fails ------------------------------------------------------------------- Thu May 28 17:12:02 UTC 2020 - Julio González Gil - Add python3-M2crypto to LTSS channels, to allow using salt even when the Server Applications Module is not used (bsc#1172226) ------------------------------------------------------------------- Wed Sep 18 12:27:55 CEST 2019 - Matej Cepl - bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only. Changes cumulatively: - fix compatibility with OpenSSL 1.1.1c. Thank you, Sebastian Andrzej Siewior from the Debian team for resolving it. - Stop pretending to support Python 3.4. - The project is now Linux-distribution agnostic - Replace all old-style classes with the new ones (it shouldn't cause any problems, but feel free to file an issue, if it does) - Do not by-pass a potential transfer decoding in m2urllib2 - SSLv3 just removed. - Various fixes of the build system and internal errors. - Patch fix_urlunsplit.patch is removed, because it is included in the upstream tarball. ------------------------------------------------------------------- Tue May 28 15:40:56 CEST 2019 - Matej Cepl - Fix use of urlunsplit (bsc#1135009) ------------------------------------------------------------------- Fri Feb 9 22:30:59 UTC 2018 - michael@stroeder.com - Update to 0.28.2: * Fix ppc builds ------------------------------------------------------------------- Fri Feb 9 09:56:10 UTC 2018 - tchvatal@suse.com - Enable tests, fix docu install phase ------------------------------------------------------------------- Thu Feb 8 18:57:19 UTC 2018 - michael@stroeder.com - Removed obsolete patches fix-build-python3.diff and fix-openssl-include-path.diff - Update to 0.28.1 * compability with Python 3 * building on Mac OS X should be now more reliable and automagic * Fix licence in metadata: it is MIT, not BSD * Fix and add tests for SWIG/_aes.i module * Bundle-in unittest2 for Python 2.6 * Remove all PGP modules ------------------------------------------------------------------- Wed Nov 8 18:13:06 UTC 2017 - jmatejek@suse.com - use generic way to require python-typing now that python3 provides it ------------------------------------------------------------------- Wed Oct 25 20:07:14 UTC 2017 - michael@stroeder.com - License set to MIT ------------------------------------------------------------------- Fri Oct 20 13:51:00 UTC 2017 - alarrosa@suse.com - Remove unnecessary fdupes call ------------------------------------------------------------------- Wed Oct 18 07:13:58 UTC 2017 - alarrosa@suse.com - Update to 0.27.0 * Fix licence: it is MIT, not BSD * At least minimal support of SNI in httpslib. * Small bugfixes and cleanups. * More effort to make build system more robust. * Restore m2.rsa_set_e() and m2.rsa_set_n(). * Make sure that every exceptional return throws and exception and viceversa. - Add patch fix-build-python3.diff to let it build with python3 - Add patch fix-openssl-include-path.diff to fix openssl include path (the code already includes the openssl/ part) - Create a new package python-M2Crypto-doc for documentation since rpmlint was complaining around 75% of the package was documentation. ------------------------------------------------------------------- Tue Sep 26 12:32:25 UTC 2017 - michael@stroeder.com - Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL ------------------------------------------------------------------- Fri Sep 22 19:22:13 UTC 2017 - michael@stroeder.com - Update to 0.26.3 with fix for a syntax error ------------------------------------------------------------------- Thu Sep 21 06:42:10 UTC 2017 - michael@stroeder.com - Update to 0.26.2 * compatibility with OpenSSL 1.1.0 ------------------------------------------------------------------- Mon Jun 19 21:47:35 UTC 2017 - sebix+novell.com@sebix.at - only require python3-typing if necessary ------------------------------------------------------------------- Sat May 6 03:33:01 UTC 2017 - toddrme2178@gmail.com - It doesn't look like python3-m2crypto ever existed, so don't provide it. ------------------------------------------------------------------- Thu Apr 27 15:56:24 UTC 2017 - alarrosa@suse.com - Add python-typing as a dependency ------------------------------------------------------------------- Wed Apr 26 15:50:39 UTC 2017 - alarrosa@suse.com - Provide python-m2crypto in the python2 package ------------------------------------------------------------------- Tue Apr 18 21:03:56 UTC 2017 - toddrme2178@gmail.com - Update to 0.26.0 * No changelog provided - Implement single-spec version. ------------------------------------------------------------------- Mon Sep 12 10:53:53 UTC 2016 - dmueller@suse.com - use pypi.io as Source URL ------------------------------------------------------------------- Fri Jul 22 14:06:42 UTC 2016 - michael@stroeder.com - update to 0.25.1 - set new dependency on package python-typing ------------------------------------------------------------------- Fri Jun 3 13:05:13 UTC 2016 - jweberhofer@weberhofer.at - update to 0.24.0 * No changelog provided - README is no longer included - Removed obsolete python-M2Crypto-SWIG-3.0.5.patch ------------------------------------------------------------------- Mon Dec 7 13:29:40 UTC 2015 - opensuse@dstoecker.de - fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch) ------------------------------------------------------------------- Sat Dec 5 20:42:42 UTC 2015 - opensuse@dstoecker.de - update to 0.22.5, fix URL - drop python-M2Crypto-SWIG-3.0.5.patch (functionality included upstream) ------------------------------------------------------------------- Thu Nov 26 09:35:28 UTC 2015 - hpj@urpla.net - SLE12 requires swig3 for a successful build, too ------------------------------------------------------------------- Tue Nov 17 17:54:49 UTC 2015 - hpj@urpla.net - fix build for openSUSE Leap 42.1 (requires swig3) ------------------------------------------------------------------- Tue Feb 24 11:35:42 UTC 2015 - dimstar@opensuse.org - Add python-M2Crypto-SWIG-3.0.5.patch: Fix generation of M2Crypto module when using SWIG 3.0.5. - Manually install _m2crypto shadow file: setup.py misses it. (boo#917759, boo#917815). ------------------------------------------------------------------- Thu Apr 17 19:49:12 UTC 2014 - hrvoje.senjan@gmail.com - Update to 0.22.3 * No changelog provided - Demos are no longer included ------------------------------------------------------------------- Thu Oct 24 11:08:11 UTC 2013 - speilicke@suse.com - Require python-setuptools instead of distribute (upstreams merged) ------------------------------------------------------------------- Fri Sep 13 14:52:08 UTC 2013 - jmatejek@suse.com - fixed %fdupes creating dangling symlinks (bnc#835687) ------------------------------------------------------------------- Fri Apr 5 13:41:54 UTC 2013 - idonmez@suse.com - Add Source URL, see https://en.opensuse.org/SourceUrls ------------------------------------------------------------------- Mon Jan 14 15:01:41 UTC 2013 - saschpe@suse.de - Add requirement on python-pyOpenSSL, thinner than M2Crypto ------------------------------------------------------------------- Wed Oct 31 13:09:21 UTC 2012 - saschpe@suse.de - Narrow the scops of fdupes (see bnc#784670) ------------------------------------------------------------------- Tue Jan 24 13:49:57 UTC 2012 - bwiedemann@suse.com - fix Obsoletes ------------------------------------------------------------------- Tue Dec 13 13:16:21 UTC 2011 - coolo@suse.com - fix license to be in spdx.org format ------------------------------------------------------------------- Thu Sep 22 09:18:45 UTC 2011 - saschpe@suse.de - Use SPDX style license - Require python-distribute instead of python-setuptools - Don't package testsuite ------------------------------------------------------------------- Tue May 31 08:18:39 UTC 2011 - saschpe@suse.de - Renamed to python-M2Crypto to match PyPI upstream name * Added Provides/Obsoletes for python-m2crypto - Fixed wrong-EOL, executable bit for docs rpmlint warnings ------------------------------------------------------------------- Mon Apr 18 09:05:48 UTC 2011 - saschpe@suse.de - Update to 0.21.1 - Support OpenSSL 1.0. Thanks to Miloslav Trmac for figuring out how to fix test_smime.py - Rename m2.engine_init to engine_init_error so that ENGINE_init and ENGINE_finish can be exposed, thanks to Erlo - 0.20 started releasing Python locks even around some operations that interacted with the Python runtime, potentially causing crashes and other weirdness, fix by Miloslav Trmac - Make httpslib.ProxyHTTPSConnection work with Python 2.3 - Removed patches that are now upstream - Removed authors from spec ------------------------------------------------------------------- Tue Apr 20 08:46:03 UTC 2010 - lnussel@suse.de - add some upstream patches to fix openssl 1.0 build ------------------------------------------------------------------- Tue Mar 30 14:09:38 CEST 2010 - matejcik@suse.cz - update to 0.20.2 * PGP subpackage is deprecated * m2urllib now closes sockets properly * port is now integer in ProxyHTTPSConnection * many bugfixes * test coverage up to 80% - enabled test suite in %check phase (requires python-setuptools and openssl binary to run) ------------------------------------------------------------------- Fri Feb 27 10:21:12 CET 2009 - jblunck@suse.de - Update to M2Crypto 0.19.1. ------------------------------------------------------------------- Tue Jan 13 20:20:39 CET 2009 - matejcik@suse.cz - package taken from devel:languages:python in OBS