Update to 0.44.0: - fix(rsa): introduce internal cache for rsa.check_key() - fix[authcookie]: modernize the module - fix(_lib): add missing #include for windows - ci: relax fedora crypto policy to legacy. - enhance setup.py for macos compatibility - prefer packaging.version over distutils.version - fix segfault with openssl 3.4.0 - fix[ec]: raise ioerror instead when load_key_bio() cannot read the file. - doc: update installation instructions for windows. - fix setting x509.verify_* variables - fix building against openssl in non-standard location - test_x509: use only x509_version_1 (0) as version for csr.Matěj Cepl2025-02-17 18:43:11 +01:00
Update to 0.43.0: - feat[m2]: add m2.time_t_bits to checking for 32bitness. - fix[tests]: Use only X509_VERSION_1 (0) as version for CSR. - fix[EC]: raise ValueError when load_key_bio() cannot read the file. - ci: use -mpip wheel instead of -mbuild - fix: use PyMem_Malloc() instead of malloc() - fix[hints]: more work on conversion of type hints to the py3k ones - fix: make the package build even on Python 3.6 - ci[local]: skip freezing local tests - fix[hints]: remove AnyStr type - test: add suggested test for RSA.{get,set}_ex_data - fix: implement interfaces for RSA_{get,set}_ex_new_{data,index} - fix: generate src/SWIG/x509_v_flag.h to overcome weaknesses of swig - fix: replace literal enumeration of all VERIFY_ constants by a cycle - test: unify various test cases in test_ssl related to ftpslib - fix: replace deprecated url keyword in setup.cfg with complete project_urls mapMatěj Cepl2024-10-30 19:43:28 +01:00
c077808d6b- Update 0.42.0: - allow ASN1_{Integer,String} be initialized directly - minimal infrastructure for type hints for a C extension and some type hints for some basic modules - time_t on 32bit Linux is 32bit (integer) not 64bit (long) - EOS for CentOS 7 - correct checking for OpenSSL version number on Windows - make compatible with Python 3.13 (replace PyEval_CallObject with PyObject_CallObject) - fix typo in extern function signature (and proper type of engine_ctrl_cmd_string()) - move the package to Sorucehut - setup CI to use Sourcehut CI - setup CI on GitLab for Windows as well (remove Appveyor) - initial draft of documentation for migration to pyca/cryptography - fix Read the Docs configuration (contributed kindly by Facundo Tuesca)Matej Cepl2024-08-10 22:41:52 +00:00
d3cb8d72a6Accepting request 1164400 from devel:languages:python
Ana Guerrero
2024-04-04 20:24:36 +00:00
baac4b359b- Build for modern python stack on SLE/LeapDaniel Garcia2024-04-03 09:23:23 +00:00
bd50587401Accepting request 1141318 from devel:languages:python
Ana Guerrero
2024-01-29 21:25:51 +00:00
0353b13501- require setuptools - add openssl-stop-parsing-header.patch (bsc#1205042) - Remove support for CentOS 6 and Python 2.6 (remove - Stop playing with swig in setup.py, we don't support swig 1.* - Replace deprecated PyObject_AsReadBuffer with our own shim - Use parametrized to create parametrized tests (new external - CI: Rework Fedora CI configuration <Neal Gompa> - in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile Added: 001-fix-buffering-for-python38.patch * efb1580 - Bump pipeline OpenSSL from 1.1.0i to 1.1.0j * 35bb71b - Stub wchar_t helpers and ignore unused WCHAR defs - Remove unnecessary fdupes call - Add python-typing as a dependency - SLE12 requires swig3 for a successful build, tooDirk Mueller2024-01-03 09:51:48 +00:00
2ad7da879eAccepting request 1120047 from devel:languages:python
Ana Guerrero
2023-10-26 15:12:01 +00:00
b5fd22981b- Add 32bit_ASN1_Time.patch to quench errors on 32bit archs.Matej Cepl2023-10-24 15:32:34 +00:00
e2be38a5e9- Update to 0.40.0: - OK, SO NOT THIS RELEASE, BUT IN THE NEXT RELEASE PYTHON2 WILL TRULY GO! - BREAKING CHANGES: - There are no SWIG generated files (src/SWIG/_m2crytpo_wrap.c) included anymore, so swig must be installed, no exceptions! Also, for compatibility with Python 3.12+, swig 4.0+ is required. - All support for asyncore has been removed, as it has been removed in Python 3.12 as well (which means also removal of contrib/dispatcher.py, M2Crypto/SSL/ssl_dispatcher.py, ZServerSSL). - All use of distutils (including the bundled ones in setuptools) has been removed, so setup.py clean is no more. - Excessively complicated and error-prone __init__py has been cleaned and import M2Crypto doesn’t include everything anymore. Imports should specified as for example with from M2Crypto import foo. - ASN1_Time handling has been mostly rewritten and it almost works even on Windows. - All tests in Gitlab CI (with exceptions of some skipped tests especially on Windows) are now green, tests of Python 2.7 on CentOS 7 have been included. - Introduce m2.err_clear_error() - Make X509_verify_cert() accessible as m2.x509_verify_certMatej Cepl2023-10-24 15:14:34 +00:00
6bf9ef0c82Accepting request 1096850 from devel:languages:python
Ana Guerrero
2023-07-11 13:56:47 +00:00
95bed22cb6- Update to 0.39.0: - SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE COMPLETELY REMOVED IN THE NEXT RELEASE. - Remove dependency on parameterized and use unittest.subTest instead. - Upgrade embedded six.py module to 1.16.0 (really tiny inconsequential changes). - Make tests working on MacOS again (test_bio_membuf: Use fork) - Use OpenSSL_version_num() instead of unrealiable parsing of .h file. - Mitigate the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657) - Add functionality to extract EC key from public key + Update tests - Worked around compatibility issues with OpenSSL 3.* - Support for Twisted has been deprecated (they have their own SSL support anyway). - Generate TAP while testing. - Stop using GitHub for testing. - Accept a small deviation from time in the testsuite (for systems with non-standard HZ kernel parameter). - Use the default BIO.__del__ rather tha overriding in BIO.File (avoid a memleak). - Resolve "X509_Name.as_der() method from X509.py -> class X509_Name caused segmentation fault" - Remove upstreamed patches: - CVE-2020-25657-Bleichenbacher-attack.patch - m2crypto-0.38-ossl3-tests.patch - openssl-adapt-tests-for-3.1.0.patch - openssl-stop-parsing-header.patchMatej Cepl2023-07-04 19:38:52 +00:00
4866370746- add timeout_300hz.patch to accept a small deviation from time in the testsuite (bsc#1212757)Dirk Mueller2023-06-27 10:52:02 +00:00
85680b0b27- update CVE-2020-25657-Bleichenbacher-attack.patch to actually contain the fix rather than just being empty (CVE-2020-25657, bsc#1178829)Dirk Mueller2022-08-03 16:49:30 +00:00
739a52ed54- Add python-M2Crypto.keyring to verify GPG signature of tarball.Matej Cepl2022-07-12 21:27:22 +00:00
ce064aef99- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657, bsc#1178829), which mitigates the Bleichenbacher timing attacks in the RSA decryption API.Matej Cepl2022-07-12 21:24:39 +00:00
c845b5b973- Update to 0.38.0: - Remove the last use of setup.py test idiom. - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer. - Add support for arm64 big endian <Steev Klimaszewski> - Make support of RSA_SSLV23_PADDING optional (it has been deprecated). - Move project to src/ layout - Allow verify_cb_* to be called with ok=True <Casey Deccio> - Be prepared if any of constants in x509_vfy.h is not available. - But we do support 3.8 - We DO NOT support Python 2.6. - All patches were upstreamed: - 293_sslv23_padding.patch - no-need-parameterized.patch - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patchMatej Cepl2021-06-14 21:07:13 +00:00
95872560fe- Update to 0.37.1: - Remove support for CentOS 6 and Python 2.6 (remove tests.vendor module). Python 2.7 is still fully supported. - Remodel CI: - on GitHub switched from Travis-CI to GH Actions - on GitLab-CI: stop testing 2.7 on Fedora, add centos7 - update appveyor.yml - Stop playing with swig in setup.py, we don't support swig 1.* anymore. - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281) - Replace deprecated PyObject_AsReadBuffer with our own shim (thanks to Casey Deccio for saving my bacon there). - Use parametrized to create parametrized tests (new external dependency). - Only use DigestSign() and DigestUpdate() with OpenSSL >= 1.1.1 - Expose all the X509_V_FLAG - Add support for DigestSign* and DigestVerify*Matej Cepl2020-12-08 18:37:18 +00:00
901dadd8c2Update to 0.36.0: - wrap SocketIO in io.Buffered* for makefile <lethliel> - SSL.Connection.close accepts an argument to force the socket closing <Christophe Haen> - SSL.Connection: make the clientPostConnectionCheck an instance attribute <Christophe Haen> - Fixed bug with usage of unexisting method getreply at SSL_Transport <roman-nagaev> - Add appveyor builds for python 3.7 and 3.8 <Daniel A. Wozniak> - Fixed syntax warning on line 44. <randomfox> - Update M2Crypto.six to 1.13.0 <Matěj Cepl> - base64.decodestring() was finally removed in Python 3.8. <Matěj Cepl> - wrap SocketIO in io.Buffered* for makefile <lethliel> - NULL is legal argument for key and iv paramters of EVP_CipherInit(3) <Matěj Cepl> - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and X509_STORE_SET_FLAGS function <Christophe Haen> - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 <Matěj Cepl> - Extend test cert validity to 2049 <Bernhard M. Wiedemann> - Revert using typing module in 2.6. It is just not worthy. <Matěj Cepl> - Update Debian/stable SSL as well <Matěj Cepl> - Make tests pass again. <Matěj Cepl> - Stop using string module, which has been deprecated. <Matěj Cepl> - Tiny fixes to make pyls more happy <Matěj Cepl> - CI: Rework Fedora CI configuration <Neal Gompa> - Remove upstream merged patch 001-fix-buffering-for-python38.patch.Matej Cepl2020-07-13 21:14:29 +00:00
10a7f1863f- Update to 0.30.1: * Various small typos (Windows builds, Fix SSL.Connection.__del__) * The project is now Linux-distribution agnostic * Replace all old-style classes with the new ones (it shouldn't cause any problems, but feel free to file an issue, if it does) * Do not by-pass a potential transfer decoding in m2urllib2 * Update M2Crypto.six with 1.11.0 and replace our local workarounds with new functions. * SSLv3 just removed. * Don't support Python 2.6 on Windows anymore. Windows users don't have python as a system package, so they are usually more likely to upgrade anyway.Matej Cepl2018-09-24 15:21:46 +00:00
Git SCM Staging
Matěj Cepl
Dominique Leuenberger
Ana Guerrero
Daniel Garcia
Dirk Mueller
Tomáš Chvátal
Ondřej Súkup
Robert Schweikert
Jan Matejek
Michael Ströder
Thomas Bechtold
