2019-08-22 15:33:38 +02:00
|
|
|
|
-------------------------------------------------------------------
|
Accepting request 775308 from home:jayvdb:branches:devel:languages:python
- Update to v19.1
* Removed deprecated aliases ContextType, ConnectionType, PKeyType, X509NameType,
X509ReqType, X509Type, X509StoreType, CRLType, PKCS7Type, PKCS12Type, and NetscapeSPKIType.
Use the classes without the ``Type`` suffix instead.
* The minimum ``cryptography`` version is now 2.8
* Deprecated ``OpenSSL.SSL.Context.set_npn_advertise_callback,
OpenSSL.SSL.Context.set_npn_select_callback, and
OpenSSL.SSL.Connection.get_next_proto_negotiated
ALPN should be used instead.
* Support bytearray in SSL.Connection.send() by using cffi's from_buffer
* The OpenSSL.SSL.Context.set_alpn_select_callback can return a new
NO_OVERLAPPING_PROTOCOLS sentinel value to allow a TLS handshake
to complete without an application protocol.
OBS-URL: https://build.opensuse.org/request/show/775308
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pyOpenSSL?expand=0&rev=69
2020-02-19 10:00:04 +01:00
|
|
|
|
Tue Feb 18 16:49:55 UTC 2020 - John Vandenberg <jayvdb@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Update to v19.1
|
|
|
|
|
|
* Removed deprecated aliases ContextType, ConnectionType, PKeyType, X509NameType,
|
|
|
|
|
|
X509ReqType, X509Type, X509StoreType, CRLType, PKCS7Type, PKCS12Type, and NetscapeSPKIType.
|
|
|
|
|
|
Use the classes without the ``Type`` suffix instead.
|
|
|
|
|
|
* The minimum ``cryptography`` version is now 2.8
|
|
|
|
|
|
* Deprecated ``OpenSSL.SSL.Context.set_npn_advertise_callback,
|
|
|
|
|
|
OpenSSL.SSL.Context.set_npn_select_callback, and
|
|
|
|
|
|
OpenSSL.SSL.Connection.get_next_proto_negotiated
|
|
|
|
|
|
ALPN should be used instead.
|
|
|
|
|
|
* Support bytearray in SSL.Connection.send() by using cffi's from_buffer
|
|
|
|
|
|
* The OpenSSL.SSL.Context.set_alpn_select_callback can return a new
|
|
|
|
|
|
NO_OVERLAPPING_PROTOCOLS sentinel value to allow a TLS handshake
|
|
|
|
|
|
to complete without an application protocol.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-08-22 15:33:38 +02:00
|
|
|
|
Thu Aug 22 12:02:59 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Add fix-compilation-2020.patch to fix tests after 2020
|
|
|
|
|
|
|
2019-03-07 17:41:39 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Mar 7 15:53:31 UTC 2019 - John Vandenberg <jayvdb@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Remove no longer necessary pytest argument -k "not test_export_text"
|
|
|
|
|
|
|
2019-03-02 17:33:31 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sat Mar 2 16:29:39 UTC 2019 - Ondřej Súkup <mimi.vx@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 19.0
|
|
|
|
|
|
- fixed build deps.
|
|
|
|
|
|
- drop patches: openssl-1.1.0i.patch
|
|
|
|
|
|
openssl-1.1.1.patch
|
|
|
|
|
|
opensuse_ca.patch
|
|
|
|
|
|
tls13-renegotiation.patch
|
|
|
|
|
|
* X509Store.add_cert no longer raises an error if you add a duplicate cert.
|
|
|
|
|
|
* pyOpenSSL now works with OpenSSL 1.1.1.
|
|
|
|
|
|
* pyOpenSSL now handles NUL bytes in X509Name.get_components()
|
|
|
|
|
|
|
2019-03-01 20:38:20 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Mar 1 18:06:10 UTC 2019 - Hans-Peter Jansen <hpj@urpla.net>
|
|
|
|
|
|
|
|
|
|
|
|
- remove everything to build docs:
|
|
|
|
|
|
- local-intersphinx-inventories.patch
|
|
|
|
|
|
- fetch-intersphinx-inventories.sh
|
|
|
|
|
|
- python3.inv
|
|
|
|
|
|
- crypto.inv
|
|
|
|
|
|
|
2019-02-26 09:50:40 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Feb 25 19:56:35 UTC 2019 - Todd R <toddrme2178@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Add fetch-intersphinx-inventories.sh to sources
|
|
|
|
|
|
|
2019-02-06 09:55:31 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sat Feb 2 18:56:14 UTC 2019 - Hans-Peter Jansen <hpj@urpla.net>
|
|
|
|
|
|
|
|
|
|
|
|
- add local-intersphinx-inventories.patch for generating the docs
|
|
|
|
|
|
correctly
|
|
|
|
|
|
- add fetch-intersphinx-inventories.sh to fetch the inventories
|
|
|
|
|
|
|
2018-10-31 06:46:13 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 30 13:41:43 UTC 2018 - Vítězslav Čížek <vcizek@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- handle that renegotiation is forbidden in TLS 1.3
|
|
|
|
|
|
* add tls13-renegotiation.patch
|
|
|
|
|
|
|
2018-10-30 12:24:49 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 30 11:21:30 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Add patch to fix issues with openssl 1.1.1:
|
|
|
|
|
|
* openssl-1.1.1.patch
|
|
|
|
|
|
- Drop the downstream fix_test_suite.patch
|
|
|
|
|
|
|
2018-10-30 01:07:19 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 30 01:06:28 CET 2018 - mcepl@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Add patch fix_test_suite.patch to allow test suite to pass with
|
|
|
|
|
|
OpenSSL 1.1.1.
|
|
|
|
|
|
|
2019-04-08 12:05:36 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Oct 5 14:31:59 UTC 2018 - Vítězslav Čížek <vcizek@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- OpenSSL changed X509_STORE_add_cert in 1.1.0i such that it no longer
|
|
|
|
|
|
raises an error if a duplicate cert is added (bsc#1110435)
|
|
|
|
|
|
* https://github.com/pyca/pyopenssl/pull/787
|
|
|
|
|
|
* add X509_STORE_add_cert.patch
|
|
|
|
|
|
|
2018-08-24 11:10:42 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Aug 24 09:08:36 UTC 2018 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Add patch to work with openssl 1.1.0i+:
|
|
|
|
|
|
* openssl-1.1.0i.patch
|
|
|
|
|
|
|
2018-08-16 17:55:53 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Aug 16 15:48:21 UTC 2018 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 18.0.0:
|
|
|
|
|
|
* Update for new openssl 1.1.1
|
|
|
|
|
|
- Remove not needed patches:
|
|
|
|
|
|
* bug-lp-1265482.diff
|
|
|
|
|
|
* rsa128-i586.patch
|
|
|
|
|
|
|
2019-02-06 09:55:31 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jun 14 14:41:50 UTC 2018 - hpj@urpla.net
|
|
|
|
|
|
|
|
|
|
|
|
- add missing python-cffi dependency
|
|
|
|
|
|
|
2018-03-20 15:52:45 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Feb 27 19:20:19 UTC 2018 - aplanas@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Use %__python3 macro to call Python 3 binary
|
|
|
|
|
|
|
2018-02-02 12:41:11 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Feb 2 11:36:18 UTC 2018 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 17.5.0:
|
|
|
|
|
|
* The minimum cryptography version is now 2.1.4.
|
|
|
|
|
|
* Fixed various memory leaks
|
|
|
|
|
|
* Various fuzz fixes
|
|
|
|
|
|
* See CHANGELOG.rst
|
|
|
|
|
|
|
Accepting request 518329 from home:tbechtold:branches:devel:languages:python
- update to 17.2.0:
- Deprecated ``OpenSSL.rand`` - callers should use ``os.urandom()`` instead.
- Fixed a bug causing ``Context.set_default_verify_paths()`` to not work with
cryptography ``manylinux1`` wheels on Python 3.x.
- Fixed a crash with (EC)DSA signatures in some cases.
- Removed the deprecated ``OpenSSL.rand.egd()`` function.
Applications should prefer ``os.urandom()`` for random number generation.
- Removed the deprecated default ``digest`` argument to ``OpenSSL.crypto.CRL.export()``.
Callers must now always pass an explicit ``digest``.
- Fixed a bug with ``ASN1_TIME`` casting in ``X509.set_notBefore()``,
``X509.set_notAfter()``, ``Revoked.set_rev_date()``, ``Revoked.set_nextUpdate()``,
and ``Revoked.set_lastUpdate()``. You must now pass times in the form
``YYYYMMDDhhmmssZ``. ``YYYYMMDDhhmmss+hhmm`` and ``YYYYMMDDhhmmss-hhmm``
will no longer work. `#612 <https://github.com/pyca/pyopenssl/pull/612>`_
- Deprecated the legacy "Type" aliases: ``ContextType``, ``ConnectionType``,
``PKeyType``, ``X509NameType``, ``X509ExtensionType``, ``X509ReqType``,
``X509Type``, ``X509StoreType``, ``CRLType``, ``PKCS7Type``, ``PKCS12Type``,
``NetscapeSPKIType``.
The names without the "Type"-suffix should be used instead.
- Added ``OpenSSL.crypto.X509.from_cryptography()`` and ``OpenSSL.crypto.X509.to_cryptography()``
for converting X.509 certificate to and from pyca/cryptography objects.
- Added ``OpenSSL.crypto.X509Req.from_cryptography()``, ``OpenSSL.crypto.X509Req.to_cryptography()``,
``OpenSSL.crypto.CRL.from_cryptography()``, and ``OpenSSL.crypto.CRL.to_cryptography()``
for converting X.509 CSRs and CRLs to and from pyca/cryptography objects.
- Added ``OpenSSL.debug`` that allows to get an overview of used library versions
(including linked OpenSSL) and other useful runtime information using
``python -m OpenSSL.debug``.
- Added a fallback path to ``Context.set_default_verify_paths()`` to accommodate
the upcoming release of ``cryptography`` ``manylinux1`` wheels.
- Drop python-pyOpenSSL=replace-expired-cert.patch . Applied upstream.
OBS-URL: https://build.opensuse.org/request/show/518329
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pyOpenSSL?expand=0&rev=42
2017-08-23 13:32:24 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Aug 23 05:26:31 UTC 2017 - tbechtold@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 17.2.0:
|
|
|
|
|
|
- Deprecated ``OpenSSL.rand`` - callers should use ``os.urandom()`` instead.
|
|
|
|
|
|
- Fixed a bug causing ``Context.set_default_verify_paths()`` to not work with
|
|
|
|
|
|
cryptography ``manylinux1`` wheels on Python 3.x.
|
|
|
|
|
|
- Fixed a crash with (EC)DSA signatures in some cases.
|
|
|
|
|
|
- Removed the deprecated ``OpenSSL.rand.egd()`` function.
|
|
|
|
|
|
Applications should prefer ``os.urandom()`` for random number generation.
|
|
|
|
|
|
- Removed the deprecated default ``digest`` argument to ``OpenSSL.crypto.CRL.export()``.
|
|
|
|
|
|
Callers must now always pass an explicit ``digest``.
|
|
|
|
|
|
- Fixed a bug with ``ASN1_TIME`` casting in ``X509.set_notBefore()``,
|
|
|
|
|
|
``X509.set_notAfter()``, ``Revoked.set_rev_date()``, ``Revoked.set_nextUpdate()``,
|
|
|
|
|
|
and ``Revoked.set_lastUpdate()``. You must now pass times in the form
|
|
|
|
|
|
``YYYYMMDDhhmmssZ``. ``YYYYMMDDhhmmss+hhmm`` and ``YYYYMMDDhhmmss-hhmm``
|
|
|
|
|
|
will no longer work. `#612 <https://github.com/pyca/pyopenssl/pull/612>`_
|
|
|
|
|
|
- Deprecated the legacy "Type" aliases: ``ContextType``, ``ConnectionType``,
|
|
|
|
|
|
``PKeyType``, ``X509NameType``, ``X509ExtensionType``, ``X509ReqType``,
|
|
|
|
|
|
``X509Type``, ``X509StoreType``, ``CRLType``, ``PKCS7Type``, ``PKCS12Type``,
|
|
|
|
|
|
``NetscapeSPKIType``.
|
|
|
|
|
|
The names without the "Type"-suffix should be used instead.
|
|
|
|
|
|
- Added ``OpenSSL.crypto.X509.from_cryptography()`` and ``OpenSSL.crypto.X509.to_cryptography()``
|
|
|
|
|
|
for converting X.509 certificate to and from pyca/cryptography objects.
|
|
|
|
|
|
- Added ``OpenSSL.crypto.X509Req.from_cryptography()``, ``OpenSSL.crypto.X509Req.to_cryptography()``,
|
|
|
|
|
|
``OpenSSL.crypto.CRL.from_cryptography()``, and ``OpenSSL.crypto.CRL.to_cryptography()``
|
|
|
|
|
|
for converting X.509 CSRs and CRLs to and from pyca/cryptography objects.
|
|
|
|
|
|
- Added ``OpenSSL.debug`` that allows to get an overview of used library versions
|
|
|
|
|
|
(including linked OpenSSL) and other useful runtime information using
|
|
|
|
|
|
``python -m OpenSSL.debug``.
|
|
|
|
|
|
- Added a fallback path to ``Context.set_default_verify_paths()`` to accommodate
|
|
|
|
|
|
the upcoming release of ``cryptography`` ``manylinux1`` wheels.
|
|
|
|
|
|
- Drop python-pyOpenSSL=replace-expired-cert.patch . Applied upstream.
|
|
|
|
|
|
- Drop python-pyOpenSSL-always-overflow.patch. Applied upstream.
|
|
|
|
|
|
|
2017-08-10 14:28:36 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Aug 10 11:38:17 CEST 2017 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- add patch to always trigger overflow in the testsuite
|
|
|
|
|
|
(gh#pyca/pyopenssl#657) b3460c6a9a45a016d1ab65c149c606fa3f07096d
|
|
|
|
|
|
|
|
|
|
|
|
python-pyOpenSSL-always-overflow.patch
|
|
|
|
|
|
|
2017-06-13 10:29:05 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jun 13 07:05:41 UTC 2017 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
|
|
- Add python-pyOpenSSL=replace-expired-cert.patch: the root cert
|
|
|
|
|
|
expired, mking the test suite fail. Replace the certificate with
|
|
|
|
|
|
a new one, valid for 20 years (gh#pyca/pyopenssl#637).
|
|
|
|
|
|
|
2017-05-05 23:35:10 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri May 5 21:32:55 UTC 2017 - toddrme2178@gmail.com
|
|
|
|
|
|
|
|
|
|
|
|
- Fix Provides/Obsoletes.
|
|
|
|
|
|
|
2016-11-16 08:46:51 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2017-05-01 17:14:02 +02:00
|
|
|
|
Wed Apr 26 14:20:27 UTC 2017 - toddrme2178@gmail.com
|
|
|
|
|
|
|
|
|
|
|
|
- Implement single-spec version
|
|
|
|
|
|
- Fix source URL
|
|
|
|
|
|
- Update to 17.0.0
|
|
|
|
|
|
* Added ``OpenSSL.X509Store.set_time()`` to set a custom
|
|
|
|
|
|
verification time when verifying certificate chains.
|
|
|
|
|
|
* Added a collection of functions for working with OCSP stapling.
|
|
|
|
|
|
None of these functions make it possible to validate OCSP
|
|
|
|
|
|
assertions, only to staple them into the handshake and to
|
|
|
|
|
|
retrieve the stapled assertion if provided.
|
|
|
|
|
|
Users will need to write their own code to handle OCSP
|
|
|
|
|
|
assertions.
|
|
|
|
|
|
We specifically added: ``Context.set_ocsp_server_callback``,
|
|
|
|
|
|
``Context.set_ocsp_client_callback``, and
|
|
|
|
|
|
``Connection.request_ocsp``.
|
|
|
|
|
|
* Changed the ``SSL`` module's memory allocation policy to
|
|
|
|
|
|
avoid zeroing memory it allocates when unnecessary.
|
|
|
|
|
|
This reduces CPU usage and memory allocation time by an amount
|
|
|
|
|
|
proportional to the size of the allocation.
|
|
|
|
|
|
For applications that process a lot of TLS data or that use
|
|
|
|
|
|
very lage allocations this can provide considerable performance
|
|
|
|
|
|
improvements.
|
2017-06-13 10:29:05 +02:00
|
|
|
|
* Automatically set ``SSL_CTX_set_ecdh_auto()`` on
|
2017-05-01 17:14:02 +02:00
|
|
|
|
``OpenSSL.SSL.Context``.
|
|
|
|
|
|
- Fix empty exceptions from ``OpenSSL.crypto.load_privatekey()``.
|
|
|
|
|
|
- Rebase bug-lp-1265482.diff
|
|
|
|
|
|
- Rebase rsa128-i586.patch
|
|
|
|
|
|
- Rebase skip-networked-test.patch
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2016-11-16 08:46:51 +01:00
|
|
|
|
Wed Nov 16 07:46:25 UTC 2016 - dmueller@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- fix source url
|
|
|
|
|
|
|
2016-11-15 15:54:47 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Nov 15 09:39:09 UTC 2016 - mlin@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Change source url to pypi.io
|
|
|
|
|
|
* version 16.2.0 source tarball failed to download from pypi.python.org
|
|
|
|
|
|
|
2016-05-17 15:40:41 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2016-11-15 10:05:32 +01:00
|
|
|
|
Mon Nov 14 08:46:18 UTC 2016 - mlin@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 16.2.0
|
|
|
|
|
|
* Deprecations
|
|
|
|
|
|
** Dropped support for OpenSSL 0.9.8.
|
|
|
|
|
|
* Changes
|
|
|
|
|
|
** Fix memory leak in OpenSSL.crypto.dump_privatekey() with FILETYPE_TEXT. #496
|
|
|
|
|
|
** Enable use of CRL (and more) in verify context. #483
|
|
|
|
|
|
** OpenSSL.crypto.PKey can now be constructed from cryptography objects and also
|
|
|
|
|
|
exported as such. #439
|
|
|
|
|
|
** Support newer versions of cryptography which use opaque structs for OpenSSL
|
|
|
|
|
|
1.1.0 compatibility.
|
|
|
|
|
|
** Fixed compatibility errors with OpenSSL 1.1.0.
|
|
|
|
|
|
** Fixed an issue that caused failures with subinterpreters and embedded Pythons.
|
|
|
|
|
|
#552
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2016-05-17 15:40:41 +02:00
|
|
|
|
Mon May 16 15:29:16 UTC 2016 - jmatejek@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- added %check section with testsuite
|
|
|
|
|
|
- skip-networked-test.patch - mark a test as networked so that we can
|
|
|
|
|
|
specify non-network test run
|
|
|
|
|
|
- rsa128-i586.patch - sidestep a crasher bug on 32bit platforms
|
|
|
|
|
|
by generating reasonably-sized RSA keys instead of small 128bit ones
|
|
|
|
|
|
|
2016-05-16 17:28:11 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon May 9 09:54:12 UTC 2016 - hpj@urpla.net
|
|
|
|
|
|
|
|
|
|
|
|
- update to 16.0.0
|
|
|
|
|
|
Backward-incompatible changes:
|
|
|
|
|
|
* Python 3.2 support has been dropped. It never had significant real world
|
|
|
|
|
|
usage and has been dropped by our main dependency cryptography. Affected
|
|
|
|
|
|
users should upgrade to Python 3.3 or later.
|
|
|
|
|
|
Deprecations:
|
|
|
|
|
|
* The support for EGD has been removed. The only affected function
|
|
|
|
|
|
OpenSSL.rand.egd() now uses os.urandom() to seed the internal PRNG instead.
|
|
|
|
|
|
Please see pyca/cryptography#1636 for more background information on this
|
|
|
|
|
|
decision. In accordance with our backward compatibility policy
|
|
|
|
|
|
OpenSSL.rand.egd() will be removed no sooner than a year from the release of
|
|
|
|
|
|
16.0.0.
|
|
|
|
|
|
* Please note that you should use urandom for all your secure random number
|
|
|
|
|
|
needs.
|
|
|
|
|
|
* Python 2.6 support has been deprecated. Our main dependency cryptography
|
|
|
|
|
|
deprecated 2.6 in version 0.9 (2015-05-14) with no time table for actually
|
|
|
|
|
|
dropping it. pyOpenSSL will drop Python 2.6 support once cryptography does.
|
|
|
|
|
|
Changes:
|
|
|
|
|
|
* Fixed OpenSSL.SSL.Context.set_session_id, OpenSSL.SSL.Connection.renegotiate,
|
|
|
|
|
|
OpenSSL.SSL.Connection.renegotiate_pending, and
|
|
|
|
|
|
OpenSSL.SSL.Context.load_client_ca. They were lacking an implementation since
|
|
|
|
|
|
0.14. #422
|
|
|
|
|
|
* Fixed segmentation fault when using keys larger than 4096-bit to sign data.
|
|
|
|
|
|
#428
|
|
|
|
|
|
* Fixed AttributeError when OpenSSL.SSL.Connection.get_app_data() was called
|
|
|
|
|
|
before setting any app data. #304
|
|
|
|
|
|
* Added OpenSSL.crypto.dump_publickey() to dump OpenSSL.crypto.PKey objects
|
|
|
|
|
|
that represent public keys, and OpenSSL.crypto.load_publickey() to load such
|
|
|
|
|
|
objects from serialized representations. #382
|
|
|
|
|
|
* Added OpenSSL.crypto.dump_crl() to dump a certificate revocation list out to
|
|
|
|
|
|
a string buffer. #368
|
|
|
|
|
|
* Added OpenSSL.SSL.Connection.get_state_string() using the OpenSSL binding
|
|
|
|
|
|
state_string_long. #358
|
|
|
|
|
|
* Added support for the socket.MSG_PEEK flag to OpenSSL.SSL.Connection.recv()
|
|
|
|
|
|
and OpenSSL.SSL.Connection.recv_into(). #294
|
|
|
|
|
|
* Added OpenSSL.SSL.Connection.get_protocol_version() and
|
|
|
|
|
|
OpenSSL.SSL.Connection.get_protocol_version_name(). #244
|
|
|
|
|
|
* Switched to utf8string mask by default. OpenSSL formerly defaulted to a
|
|
|
|
|
|
T61String if there were UTF-8 characters present. This was changed to
|
|
|
|
|
|
default to UTF8String in the config around 2005, but the actual code didn’t
|
|
|
|
|
|
change it until late last year. This will default us to the setting that
|
|
|
|
|
|
actually works. To revert this you can call
|
|
|
|
|
|
OpenSSL.crypto._lib.ASN1_STRING_set_default_mask_asc(b"default"). #234
|
|
|
|
|
|
|
|
|
|
|
|
- fixed paths in bug-lp-1265482.diff
|
|
|
|
|
|
- fixed doc generation
|
|
|
|
|
|
- spec clean up
|
|
|
|
|
|
|
2015-07-14 15:10:16 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jul 14 13:07:00 UTC 2015 - toddrme2178@gmail.com
|
|
|
|
|
|
|
|
|
|
|
|
- Fix building on SLES 11
|
|
|
|
|
|
|
2015-04-22 11:57:59 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Apr 22 09:50:09 UTC 2015 - mcihar@suse.cz
|
|
|
|
|
|
|
|
|
|
|
|
- Do not hardcode version in file list
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Apr 22 09:42:53 UTC 2015 - mcihar@suse.cz
|
|
|
|
|
|
|
|
|
|
|
|
- udapte to 0.15.1
|
|
|
|
|
|
* OpenSSL/SSL.py, OpenSSL/test/test_ssl.py: Fix a regression
|
|
|
|
|
|
present in 0.15, where when an error occurs and no errno() is set,
|
|
|
|
|
|
a KeyError is raised. This happens, for example, if
|
|
|
|
|
|
Connection.shutdown() is called when the underlying transport has
|
|
|
|
|
|
gone away.
|
|
|
|
|
|
* OpenSSL/rand.py, OpenSSL/SSL.py: APIs which previously accepted
|
|
|
|
|
|
filenames only as bytes now accept them as either bytes or
|
|
|
|
|
|
unicode (and respect sys.getfilesystemencoding()).
|
|
|
|
|
|
* OpenSSL/SSL.py: Add Cory Benfield's next-protocol-negotiation
|
|
|
|
|
|
(NPN) bindings.
|
|
|
|
|
|
* OpenSSL/SSL.py: Add ``Connection.recv_into``, mirroring the
|
|
|
|
|
|
builtin ``socket.recv_into``. Based on work from Cory Benfield.
|
|
|
|
|
|
* OpenSSL/test/test_ssl.py: Add tests for ``recv_into``.
|
|
|
|
|
|
* OpenSSL/crypto.py: Expose ``X509StoreContext`` for verifying certificates.
|
|
|
|
|
|
* OpenSSL/test/test_crypto.py: Add intermediate certificates for
|
|
|
|
|
|
* OpenSSL/SSL.py: ``Connection.shutdown`` now propagates errors from the
|
|
|
|
|
|
underlying socket.
|
|
|
|
|
|
* OpenSSL/SSL.py: Fixed a regression ``Context.check_privatekey``
|
|
|
|
|
|
causing it to always succeed - even if it should fail.
|
|
|
|
|
|
* OpenSSL/crypto.py: Fixed a regression where calling ``load_pkcs7_data``
|
|
|
|
|
|
with ``FILETYPE_ASN1`` would fail with a ``NameError``.
|
|
|
|
|
|
* OpenSSL/SSL.py: Fix a regression in which the first argument of
|
|
|
|
|
|
|
2014-03-26 16:28:17 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Feb 24 12:58:58 UTC 2014 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 0.14
|
|
|
|
|
|
* Support for TLSv1.1 and TLSv1.2
|
|
|
|
|
|
* First-class support for PyPy
|
|
|
|
|
|
* New flags, such as MODE_RELEASE_BUFFERS and OP_NO_COMPRESSION
|
|
|
|
|
|
* Some APIs to access to the SSL session cache
|
|
|
|
|
|
* A variety of bug fixes for error handling cases
|
|
|
|
|
|
* Documentation has been converted from LaTeX
|
|
|
|
|
|
+ python-pyOpenSSL-doc is now build from single spec file
|
|
|
|
|
|
* pyOpenSSL now depends on cryptography, so it became pure-python
|
|
|
|
|
|
module
|
|
|
|
|
|
+ changed to noarch package, add proper dependencies
|
|
|
|
|
|
* Development moved to github
|
|
|
|
|
|
+ changed Url tag respectivelly
|
|
|
|
|
|
- refreshed bug-lp-1265482.diff
|
|
|
|
|
|
|
2014-01-02 12:34:20 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jan 2 11:17:23 UTC 2014 - dmueller@suse.com
|
|
|
|
|
|
|
2014-01-04 14:07:32 +01:00
|
|
|
|
-Add bug-lp-1265482.diff; fix testsuite for SLE11 (bnc#855666)
|
2014-01-02 12:34:20 +01:00
|
|
|
|
|
2013-09-13 17:09:49 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Sep 13 14:02:43 UTC 2013 - jmatejek@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 0.13.1
|
|
|
|
|
|
* fixes NUL byte handling in subjectAltName (bnc#839107, CVE-2013-4314)
|
|
|
|
|
|
|
2012-07-10 12:54:07 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2013-04-05 09:51:52 +02:00
|
|
|
|
Fri Apr 5 07:54:12 UTC 2013 - speilicke@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Package LICENSE
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2012-07-10 12:54:07 +02:00
|
|
|
|
Mon Jul 9 18:34:08 PDT 2012 - msuman@opensuse.org
|
|
|
|
|
|
|
|
|
|
|
|
- Update to version 0.13
|
|
|
|
|
|
* Add OPENSSL_VERSION_NUMBER, SSLeay_version and related
|
|
|
|
|
|
constants for retrieving version information about the
|
|
|
|
|
|
underlying OpenSSL library.
|
|
|
|
|
|
* Support OpenSSL 1.0.0a and related changes.
|
|
|
|
|
|
* Remove SSLv2 support if the underlying OpenSSL library does
|
|
|
|
|
|
not provide it.
|
|
|
|
|
|
* Add a new method to the X509 type, get_signature_algorithm.
|
|
|
|
|
|
* Add a new method to the Connection type, get_peer_cert_chain.
|
|
|
|
|
|
* Add the PKey.check method to verify the internal consistency
|
|
|
|
|
|
of a PKey instance.
|
|
|
|
|
|
* Bug fixes.
|
|
|
|
|
|
|
2011-09-01 10:55:44 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Sep 1 08:48:23 UTC 2011 - saschpe@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Changed license to Apache-2.0, to fix bnc#715423
|
|
|
|
|
|
|
2011-08-31 16:44:01 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Aug 31 14:21:58 UTC 2011 - saschpe@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Initial version, obsoletes 'python-openssl':
|
|
|
|
|
|
* Builds properly on all SUSE version
|
|
|
|
|
|
* Has real HTML documentation
|
|
|
|
|
|
|
