2016-05-17 15:40:41 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2016-11-15 10:05:32 +01:00
|
|
|
|
Mon Nov 14 08:46:18 UTC 2016 - mlin@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 16.2.0
|
|
|
|
|
|
* Deprecations
|
|
|
|
|
|
** Dropped support for OpenSSL 0.9.8.
|
|
|
|
|
|
* Changes
|
|
|
|
|
|
** Fix memory leak in OpenSSL.crypto.dump_privatekey() with FILETYPE_TEXT. #496
|
|
|
|
|
|
** Enable use of CRL (and more) in verify context. #483
|
|
|
|
|
|
** OpenSSL.crypto.PKey can now be constructed from cryptography objects and also
|
|
|
|
|
|
exported as such. #439
|
|
|
|
|
|
** Support newer versions of cryptography which use opaque structs for OpenSSL
|
|
|
|
|
|
1.1.0 compatibility.
|
|
|
|
|
|
** Fixed compatibility errors with OpenSSL 1.1.0.
|
|
|
|
|
|
** Fixed an issue that caused failures with subinterpreters and embedded Pythons.
|
|
|
|
|
|
#552
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2016-05-17 15:40:41 +02:00
|
|
|
|
Mon May 16 15:29:16 UTC 2016 - jmatejek@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- added %check section with testsuite
|
|
|
|
|
|
- skip-networked-test.patch - mark a test as networked so that we can
|
|
|
|
|
|
specify non-network test run
|
|
|
|
|
|
- rsa128-i586.patch - sidestep a crasher bug on 32bit platforms
|
|
|
|
|
|
by generating reasonably-sized RSA keys instead of small 128bit ones
|
|
|
|
|
|
|
2016-05-16 17:28:11 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon May 9 09:54:12 UTC 2016 - hpj@urpla.net
|
|
|
|
|
|
|
|
|
|
|
|
- update to 16.0.0
|
|
|
|
|
|
Backward-incompatible changes:
|
|
|
|
|
|
* Python 3.2 support has been dropped. It never had significant real world
|
|
|
|
|
|
usage and has been dropped by our main dependency cryptography. Affected
|
|
|
|
|
|
users should upgrade to Python 3.3 or later.
|
|
|
|
|
|
Deprecations:
|
|
|
|
|
|
* The support for EGD has been removed. The only affected function
|
|
|
|
|
|
OpenSSL.rand.egd() now uses os.urandom() to seed the internal PRNG instead.
|
|
|
|
|
|
Please see pyca/cryptography#1636 for more background information on this
|
|
|
|
|
|
decision. In accordance with our backward compatibility policy
|
|
|
|
|
|
OpenSSL.rand.egd() will be removed no sooner than a year from the release of
|
|
|
|
|
|
16.0.0.
|
|
|
|
|
|
* Please note that you should use urandom for all your secure random number
|
|
|
|
|
|
needs.
|
|
|
|
|
|
* Python 2.6 support has been deprecated. Our main dependency cryptography
|
|
|
|
|
|
deprecated 2.6 in version 0.9 (2015-05-14) with no time table for actually
|
|
|
|
|
|
dropping it. pyOpenSSL will drop Python 2.6 support once cryptography does.
|
|
|
|
|
|
Changes:
|
|
|
|
|
|
* Fixed OpenSSL.SSL.Context.set_session_id, OpenSSL.SSL.Connection.renegotiate,
|
|
|
|
|
|
OpenSSL.SSL.Connection.renegotiate_pending, and
|
|
|
|
|
|
OpenSSL.SSL.Context.load_client_ca. They were lacking an implementation since
|
|
|
|
|
|
0.14. #422
|
|
|
|
|
|
* Fixed segmentation fault when using keys larger than 4096-bit to sign data.
|
|
|
|
|
|
#428
|
|
|
|
|
|
* Fixed AttributeError when OpenSSL.SSL.Connection.get_app_data() was called
|
|
|
|
|
|
before setting any app data. #304
|
|
|
|
|
|
* Added OpenSSL.crypto.dump_publickey() to dump OpenSSL.crypto.PKey objects
|
|
|
|
|
|
that represent public keys, and OpenSSL.crypto.load_publickey() to load such
|
|
|
|
|
|
objects from serialized representations. #382
|
|
|
|
|
|
* Added OpenSSL.crypto.dump_crl() to dump a certificate revocation list out to
|
|
|
|
|
|
a string buffer. #368
|
|
|
|
|
|
* Added OpenSSL.SSL.Connection.get_state_string() using the OpenSSL binding
|
|
|
|
|
|
state_string_long. #358
|
|
|
|
|
|
* Added support for the socket.MSG_PEEK flag to OpenSSL.SSL.Connection.recv()
|
|
|
|
|
|
and OpenSSL.SSL.Connection.recv_into(). #294
|
|
|
|
|
|
* Added OpenSSL.SSL.Connection.get_protocol_version() and
|
|
|
|
|
|
OpenSSL.SSL.Connection.get_protocol_version_name(). #244
|
|
|
|
|
|
* Switched to utf8string mask by default. OpenSSL formerly defaulted to a
|
|
|
|
|
|
T61String if there were UTF-8 characters present. This was changed to
|
|
|
|
|
|
default to UTF8String in the config around 2005, but the actual code didn’t
|
|
|
|
|
|
change it until late last year. This will default us to the setting that
|
|
|
|
|
|
actually works. To revert this you can call
|
|
|
|
|
|
OpenSSL.crypto._lib.ASN1_STRING_set_default_mask_asc(b"default"). #234
|
|
|
|
|
|
|
|
|
|
|
|
- fixed paths in bug-lp-1265482.diff
|
|
|
|
|
|
- fixed doc generation
|
|
|
|
|
|
- spec clean up
|
|
|
|
|
|
|
2015-07-14 15:10:16 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jul 14 13:07:00 UTC 2015 - toddrme2178@gmail.com
|
|
|
|
|
|
|
|
|
|
|
|
- Fix building on SLES 11
|
|
|
|
|
|
|
2015-04-22 11:57:59 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Apr 22 09:50:09 UTC 2015 - mcihar@suse.cz
|
|
|
|
|
|
|
|
|
|
|
|
- Do not hardcode version in file list
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Apr 22 09:42:53 UTC 2015 - mcihar@suse.cz
|
|
|
|
|
|
|
|
|
|
|
|
- udapte to 0.15.1
|
|
|
|
|
|
* OpenSSL/SSL.py, OpenSSL/test/test_ssl.py: Fix a regression
|
|
|
|
|
|
present in 0.15, where when an error occurs and no errno() is set,
|
|
|
|
|
|
a KeyError is raised. This happens, for example, if
|
|
|
|
|
|
Connection.shutdown() is called when the underlying transport has
|
|
|
|
|
|
gone away.
|
|
|
|
|
|
* OpenSSL/rand.py, OpenSSL/SSL.py: APIs which previously accepted
|
|
|
|
|
|
filenames only as bytes now accept them as either bytes or
|
|
|
|
|
|
unicode (and respect sys.getfilesystemencoding()).
|
|
|
|
|
|
* OpenSSL/SSL.py: Add Cory Benfield's next-protocol-negotiation
|
|
|
|
|
|
(NPN) bindings.
|
|
|
|
|
|
* OpenSSL/SSL.py: Add ``Connection.recv_into``, mirroring the
|
|
|
|
|
|
builtin ``socket.recv_into``. Based on work from Cory Benfield.
|
|
|
|
|
|
* OpenSSL/test/test_ssl.py: Add tests for ``recv_into``.
|
|
|
|
|
|
* OpenSSL/crypto.py: Expose ``X509StoreContext`` for verifying certificates.
|
|
|
|
|
|
* OpenSSL/test/test_crypto.py: Add intermediate certificates for
|
|
|
|
|
|
* OpenSSL/SSL.py: ``Connection.shutdown`` now propagates errors from the
|
|
|
|
|
|
underlying socket.
|
|
|
|
|
|
* OpenSSL/SSL.py: Fixed a regression ``Context.check_privatekey``
|
|
|
|
|
|
causing it to always succeed - even if it should fail.
|
|
|
|
|
|
* OpenSSL/crypto.py: Fixed a regression where calling ``load_pkcs7_data``
|
|
|
|
|
|
with ``FILETYPE_ASN1`` would fail with a ``NameError``.
|
|
|
|
|
|
* OpenSSL/SSL.py: Fix a regression in which the first argument of
|
|
|
|
|
|
|
2014-03-26 16:28:17 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Feb 24 12:58:58 UTC 2014 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 0.14
|
|
|
|
|
|
* Support for TLSv1.1 and TLSv1.2
|
|
|
|
|
|
* First-class support for PyPy
|
|
|
|
|
|
* New flags, such as MODE_RELEASE_BUFFERS and OP_NO_COMPRESSION
|
|
|
|
|
|
* Some APIs to access to the SSL session cache
|
|
|
|
|
|
* A variety of bug fixes for error handling cases
|
|
|
|
|
|
* Documentation has been converted from LaTeX
|
|
|
|
|
|
+ python-pyOpenSSL-doc is now build from single spec file
|
|
|
|
|
|
* pyOpenSSL now depends on cryptography, so it became pure-python
|
|
|
|
|
|
module
|
|
|
|
|
|
+ changed to noarch package, add proper dependencies
|
|
|
|
|
|
* Development moved to github
|
|
|
|
|
|
+ changed Url tag respectivelly
|
|
|
|
|
|
- refreshed bug-lp-1265482.diff
|
|
|
|
|
|
|
2014-01-02 12:34:20 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jan 2 11:17:23 UTC 2014 - dmueller@suse.com
|
|
|
|
|
|
|
2014-01-04 14:07:32 +01:00
|
|
|
|
-Add bug-lp-1265482.diff; fix testsuite for SLE11 (bnc#855666)
|
2014-01-02 12:34:20 +01:00
|
|
|
|
|
2013-09-13 17:09:49 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Sep 13 14:02:43 UTC 2013 - jmatejek@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 0.13.1
|
|
|
|
|
|
* fixes NUL byte handling in subjectAltName (bnc#839107, CVE-2013-4314)
|
|
|
|
|
|
|
2012-07-10 12:54:07 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2013-04-05 09:51:52 +02:00
|
|
|
|
Fri Apr 5 07:54:12 UTC 2013 - speilicke@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Package LICENSE
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2012-07-10 12:54:07 +02:00
|
|
|
|
Mon Jul 9 18:34:08 PDT 2012 - msuman@opensuse.org
|
|
|
|
|
|
|
|
|
|
|
|
- Update to version 0.13
|
|
|
|
|
|
* Add OPENSSL_VERSION_NUMBER, SSLeay_version and related
|
|
|
|
|
|
constants for retrieving version information about the
|
|
|
|
|
|
underlying OpenSSL library.
|
|
|
|
|
|
* Support OpenSSL 1.0.0a and related changes.
|
|
|
|
|
|
* Remove SSLv2 support if the underlying OpenSSL library does
|
|
|
|
|
|
not provide it.
|
|
|
|
|
|
* Add a new method to the X509 type, get_signature_algorithm.
|
|
|
|
|
|
* Add a new method to the Connection type, get_peer_cert_chain.
|
|
|
|
|
|
* Add the PKey.check method to verify the internal consistency
|
|
|
|
|
|
of a PKey instance.
|
|
|
|
|
|
* Bug fixes.
|
|
|
|
|
|
|
2011-09-01 10:55:44 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Sep 1 08:48:23 UTC 2011 - saschpe@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Changed license to Apache-2.0, to fix bnc#715423
|
|
|
|
|
|
|
2011-08-31 16:44:01 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Aug 31 14:21:58 UTC 2011 - saschpe@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Initial version, obsoletes 'python-openssl':
|
|
|
|
|
|
* Builds properly on all SUSE version
|
|
|
|
|
|
* Has real HTML documentation
|
|
|
|
|
|
|
