pool/python-pysaml2
SHA256
11
0
Fork 2
Code Issues Pull Requests Activity
Files
factory
python-pysaml2/python-pysaml2.changes

475 lines
21 KiB
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

-------------------------------------------------------------------
Tue Apr 8 07:29:45 UTC 2025 - Ben Greiner <code@bnavigator.de>
- Fix dependencies gh#IdentityPython/pysaml2#984
-------------------------------------------------------------------
Fri Feb 28 04:15:23 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
- Update to 7.5.2
* Include the XSD of the XML Encryption Syntax and Processing
Version 1.1 to the schema validator
- Update to 7.5.1
* deps: restrict pyOpenSSL up to v24.2.1 until it is replaced
* deps: update dependncies for the lockfile and examples
- add use-cryptography.patch to fix tests
-------------------------------------------------------------------
Tue Oct 29 08:15:43 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 7.5.0:
* Fix missing requested attributes from the ACS
* Add support for errorURL to be exposed in metadata for IdP
* Update logged message when the signature validation on the
assertion fails
* Replace imp with importlib
* deps: restrict xmlschema version
* deps: remove utility from packaging
* examples: update code and README to align with latest code
* docs: update readme with info about xmlsec1 compatibility
-------------------------------------------------------------------
Mon Jan 29 13:54:33 UTC 2024 - Petr Gajdos <pgajdos@suse.com>
- update to 7.4.2:
* Add support for xmlsec1 1.3.x
* Use the set crypto_backend when creating the entity metadata
* ## 7.4.1 (2023-02-24)
* Fix subject-id requirements processing
* ## 7.4.0 (2023-02-14)
* Ensure the ID of each Signature element is unique when
signing an encrypted assertion
* Bump Python to 3.9
* dev: Add mypy configuration and type stubs
* tests: move tox.ini config into pyproject.toml
* docs: Update release instructions
* ## 7.3.0 (2023-02-14)
* During metadata generation, render extensions both for
EntityDescriptor and IdPSSODescriptor
* Fix compatibility with certain SAML implementation that
inflate messasges on the POST binding
* Update the SWAMID entity category requirements
* Fix check for NameID when it originates from an encrypted
asssertion
* Add support for pymongo `>=3.5` and `<5`
* Update README with supported specifications
* Remove dependency on the six package
* Cleanup unused imports and pythonisms for Python versions
older than 3.6
* Convert README to markdown
* Introduce flake8 to check for issues
* Use black and isort to manage formatting and imports
* Use poetry to manage the project dependencies, packaging and
versions
* Fix whitespace typos on the eIDAS schemas
* Try different logout bindings on the saml2.client level
* Add the mailLocalAddress attribute as part of the saml and
shib uri name format bundles
* Add the isMemberOf attribute as part of the basic attribute
format bundle
- drop upstreamed pymongo-4-support.patch
-------------------------------------------------------------------
Sun Jun 11 13:23:30 UTC 2023 - ecsos <ecsos@opensuse.org>
- Add %{?sle15_python_module_pythons}
-------------------------------------------------------------------
Tue Nov 15 14:23:13 UTC 2022 - Rolf Krahl <rolf@rotkraut.de>
- Fix dependencies according to upstream setup.cfg
-------------------------------------------------------------------
Thu Oct 6 21:56:41 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
- version update to 7.2.1 (2022-08-23)
* Accept and forward sign and digest alg information when creating a metadata string
* Fix tests to comply with latest xmlschema
- version update to 7.2.0 (2022-08-10)
* Add schemas for eIDAS extensions, elements and attributes
* Add the voPerson v2 attributes mappings; see reference
* Add the registration_info_typ method on saml2.mdstore.MetadataStore to get the registration information from an EntityDescriptor services
* Allow exceptions to convey the SAML StatusCode in an error response
* Fix typo on method name under saml2.mdstore.MetadataStore; from sbibmd_scopes to shibmd_scopes
* Add partial support for xs:date AttributeValue type
* Fallback to xs:string as the type of the AttributeValue text node
* Fallback to the authn context class declaration to set the authn context class reference
* Αdd configuration option http_client_timeout to set a timeout on the HTTP calls by the httpbase module
* Load certificates using cryptography and support certificate chains
* Remove deprecated cryptography backend param
* Fix assertion policy filter: Fallback to match a known attribute or return its name
* examples: Allow multiple attributes to be returned by the idp
* tests: Minor cleanups
* docs: Reference python2 compatible fork
* misc: add pepy badges on the README file
-------------------------------------------------------------------
Thu Jul 28 06:04:01 UTC 2022 - Steve Kowalik <steven.kowalik@suse.com>
- Add patch pymongo-4-support.patch:
* Support pymongo >= 4
-------------------------------------------------------------------
Thu Apr 7 08:37:47 UTC 2022 - pgajdos@suse.com
- version update to 7.1.2
## 7.1.2 (2022-03-04)
- fix assertion policy filter to try to resolve the local_name using the friendly name if it failed with the name_format
- reload metadata in-place to avoid memory leak
- tests: Restrict pymongo to v3
- docs: highlight installation command
## 7.1.1 (2022-02-22)
- Process and verify the metadata signature for EntitiesDescriptor and EntityDescriptor
- Fix client to be able to retry creating an AuthnRequest with a different binding
- Allow requested_authn_context to be an object
- AttributeValues are optional; allow Attributes to not have values
- Update SWAMID entity category to support https://myacademicid.org/entity-categories/esi
- Fix signing for requests with the SOAP binding
- tests: new test case for signed SOAP LogoutRequests
- docs: document the metadata node_name option for the remote source
- examples: align with latest updates
- deps: declare setuptools as a requirement for processing the package version
- build: add python 3.9 and 3.10 to classifiers
- misc: linter fixes
## 7.1.0 (2021-11-16)
- Fix signature verification for the redirect binding for AuthnRequest and
LogoutRequest.
- Include encryption KeyName in encrypted assertions.
- Add "reason" field in invalid signature errors due to invalid document format.
- New SP configuration option requested_authn_context to set the preferred
RequestedAuthnContext class reference.
- Add support for metadata refresh by adding a metadata_reload method into saml2.Entity.
This method is to be externally invoked, and to receive the same metadata
configuration as what was passed under the metadata key to saml2.Config. The method
loads a new metadata configuration and swaps it in (replacing the references across
several objects that hold a metadata reference).
- Fix SessionIndex resolution during logout.
- Fix AuthnResponse::get_subject to be able to decrypt a NameID with the given keys.
- Refactor AuthnResponse::authn_info to consider DeclRef equivalent to ClassRef.
- Ensure creation of multiple ePTIDs is handled correctly.
- Improve signature checks by ensuring the Object element is absent, enforcing allowed
transform aglorithms, enforcing allowed canonicalization methods and requiring the
enveloped-signature transform to be present.
- mdstore: Make unknown metadata extensions available through the internal metadata.
- mdstore: Fix the exception handler of the InMemoryMetaData object.
- mdstore: Fix the serialization of the MetadataStore object.
- examples: Fix code to catter changes in interfaces.
- examples: Update certificates to avoid SSL KEY TO SMALL errors.
- docs: Significant improvement on the configuration options documentation.
- docs: Fix typos.
- python-mock is not required for build
-------------------------------------------------------------------
Fri Jul 2 20:25:49 UTC 2021 - Michael Ströder <michael@stroeder.com>
- removed obsolete 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch
- Update to 7.0.1:
* 7.0.1 (2021-05-20)
- Preserve order of response bindings on IdP-initiated logout
- Fix use of expected binding on SP logout
* 7.0.0 (2021-05-18)
- **BREAKING** Replace encryption method rsa-1_5 with rsa-oaep-mgf1p
- Add documentation next to the code
* 6.5.2 (2021-05-18)
- Add shibmd_scopes metadata extractor
- Allow the Issuer element on a Response to be missing
- Respect the preferred_binding configuration for the single_logout_service
- Fix logout signature flags for redirect, post and soap requests
- Respect the logout_requests_signed configuration option
- Fix crash when applying policy on RequestedAttribute without a friendlyName
- Correctly validate IssueInstant
- Correctly handle AudienceRestriction elements with no value
- Raise InvalidAssertion exception when assertion requirements are not met
- Raise SAMLError on failure to parse a metadata file
- Raise StatusInvalidAuthnResponseStatement when the AuthnStatement is not valid
- Handle all forms of ACS endpoint specifications
- tests: Always use base64.encodebytes; base64.encodestring has been dropped
- build: Set minimum version needed for xmlschema
- docs: Update Travis CI badge from travis-ci.org to travis-ci.com
- examples: Fix example code
-------------------------------------------------------------------
Mon Apr 26 12:55:01 UTC 2021 - Dirk Müller <dmueller@suse.com>
- add 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch
-------------------------------------------------------------------
Mon Jan 25 15:06:45 UTC 2021 - Dirk Müller <dmueller@suse.com>
- update requires
-------------------------------------------------------------------
Wed Jan 20 23:41:54 UTC 2021 - Michael Ströder <michael@stroeder.com>
- Update to 6.5.1:
* Fix the parser to take into account both the xs and xsd namespace prefixes
-------------------------------------------------------------------
Wed Jan 20 20:12:26 UTC 2021 - Michael Ströder <michael@stroeder.com>
- Update to 6.5.0 - Security release
* Fix processing of invalid SAML XML documents - CVE-2021-21238
* Fix unspecified xmlsec1 key-type preference - CVE-2021-21239
* Add more tests regarding XSW attacks
* Add XML Schemas for SAML2 and common extensions
* Fix the XML parser to not break on ePTID AttributeValues
* Fix the initialization value of the return_addrs property of the StatusResponse object
* Fix SWAMID entity-category policy regarding eduPersonTargetedID
* data: use importlib to load package data (backwards compatibility through the importlib_resources package)
* docs: improve the documentation for the signing_algorithm and digest_algorithm options
* examples: fix the logging configuration of the example-IdP
* tests: allow tests to pass on 32bit systems by properly choosing dates in test XML documents
* tests: improvements on the generation of response and assertion objects
* tests: expand tests on python-3.9 and python-3.10-dev
- added new build dependencies:
* python3-importlib-resources
* python3-xmlschema
* update-alternatives
- removed obsolete avoid-too-large-dates.patch
- replaced %python3_alternative by %python_alternative
-------------------------------------------------------------------
Wed Jan 6 10:49:48 UTC 2021 - Matej Cepl <mcepl@suse.com>
- Add avoid-too-large-dates.patch to avoid test failures on i586
(Y38K bug; gh#IdentityPython/pysaml2#759)
-------------------------------------------------------------------
Mon Jan 4 21:25:04 UTC 2021 - Matej Cepl <mcepl@suse.com>
- Skip test test_filter_ava_registration_authority_1
(gh#IdentityPython/pysaml2#759).
-------------------------------------------------------------------
Sun Dec 20 10:04:41 UTC 2020 - Dirk Müller <dmueller@suse.com>
- update to 6.3.1:
- Fix extraction of RegistrationInfo when no information is available
- Fix http_info struct to include status-code
- Allow to specify policy configurations based on the registration authority.
- Add new configuration option `logout_responses_signed` to sign logout responses.
- When available and appropriate return the ResponseLocation along with the Location
attribute.
- Always use base64.encodebytes; base64.encodestring has been dropped.
- Examples: fix IdP example that was outputing debug statements on stdout that became
part of its metadata.
- CI/CD: Use Ubuntu bionic as the host to run the CI/CD process.
- CI/CD: Pre-releases are now available on [test.pypi.org][pypi.test.pysaml2]. Each
commit/merge on the master branch autotically creates a new pre-release. To install a
prelease, run:
- Fix the generated xsd:ID format for EncryptedData and EncryptedKey elements
- Set the default value for the NameFormat attribute to unspecified when parsing
- Support arbitrary entity attributes
- Replace all asserts with proper checks
- Allow request signing in artifact2message
- Support logging configuration through the python logger
- Fix wrong identifiers for ecdsa algos
- Fix automatic inversion of attribute map files
- Factor out common codepaths in attribute_converter
- Remove uneeded exception logging
- Docs: Update configuration options documentation
- Examples: Support both str and bytes in SAML requests on the example idp
- Examples: Update to key generation to 2048 bits
-------------------------------------------------------------------
Sat Jul 11 18:07:25 UTC 2020 - Michael Ströder <michael@stroeder.com>
- update to 6.1.0:
* Fix signed logout requests flag
* Differentiate between metadata NameIDFormat and AuthnRequest NameIDPolicy Format
- Users using `name_id_format` to set the `<NameIDPolicy Format="...">` attribute now
need to use the new configuration option `name_id_policy_format`.
* Fix documentation formatting
* Fix generation of signed metadata
* Add attribute mappings used by SwedenConnect (DIGG, INERA and PKIX specifications)
* Update SWAMID entity category
* Document the `additional_cert_files` configuration option
-------------------------------------------------------------------
Fri Jul 10 12:29:12 UTC 2020 - Dirk Mueller <dmueller@suse.com>
- update to 5.3.0:
- Fix check for nameid_format set to the string "None" in the configuration
- Fix presence of empty eIDAS RequestedAttributes element on AuthnRequest
- Refactor create_authn_request method to be easier to reason about
- Fix NameIDPolicy checks for allowed Format and allowCreate values
-------------------------------------------------------------------
Sun Jun 14 08:57:41 UTC 2020 - Dirk Mueller <dmueller@suse.com>
- update to 5.1.0:
- support eIDAS RequestedAttributes per AuthnRequest
- fix xmlsec1 --id-attr configuration option value
- do not remove existing disco URL query params
- load attribute maps in predictable order
- better error message when AudienceRestriction does not validate
- always use base64.encodebytes instead of base64.encodestring
- update the eIDAS attribute mapping for legal person
- fix py_compile warnings
- fix pylint errors and warnings
- various small fixes
- add Python3.8 as supported
- tests: fix validity dates
- docs: document default value for 'want_response_signed'
-------------------------------------------------------------------
Tue May 5 12:50:42 UTC 2020 - Matej Cepl <mcepl@suse.com>
- Don't use %python3_only command, but properly use alternatives.
- Skip failing tests on i586 (gh#IdentityPython/pysaml2#682)
-------------------------------------------------------------------
Sat Mar 14 15:57:25 UTC 2020 - Dirk Mueller <dmueller@suse.com>
- update to 5.0.0:
- Fix XML Signature Wrapping (XSW) vulnerabilities - CVE-2020-5390
- Add freshness period feature for MetaDataMDX
- Fix bug in duration calculation in time_util library
- Fix ipv6 validation to accommodate for addresses with brackets
- Fix xmlsec temporary files deletions
- Add method to get supported algorithms from metadata
- Add mdstore method to extract assurance certifications
- Add mdstore method to extract contact_person data
- Add attribute mappings from the Swiss eduPerson Schema
- Make AESCipher and Fernet interfaces compatible
- Remove deprecated saml2.aes module
- Remove deprecated saml2.extensions.ui module
- Replace deprecated mongodb operations
- Rename ToOld error to TooOld
- Fix pytest warnings
- Mock tests that need a network connection
- Start dropping python2 support
- Add mdstore methods to extract mdui uiinfo elements
- Add attribute mapping for umbrellaID attributes
- Fix logic error in pick_binding method for Entity class
- Validate the audience of assertions regardless of a response being unsolicited
- Fix PKCS_9 saml_url prefix
- docs: Fix warnings from docs generation
- docs: Update release instructions regarding branch releases
- docs: Fix list formatting on IdP example page
- docs: Update pysaml2 options doc with `name_id_format_allow_create`
- misc: fix various typos
-------------------------------------------------------------------
Tue Jan 7 11:37:57 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Use python dbm dependency instead of legacy gdbm
-------------------------------------------------------------------
Mon Jul 22 14:57:53 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 4.8.0:
* Refactor the way ForceAuthn is set: check for "true" and "1"
* Allow to set NameQualifier and SPNameQualifier attributes for ePTID
* Parse assertions with Holder-of-Key profile
* Add created_at timestamps to all mongodb documents
* Look for existing persistent id's before creating new ones
* Do not add AllowCreate property for default transient NameID
* Enable entity category import from module search path
* Add SAML subject identifier attributes to saml2_uri attributemap
* Fix deprecation warning regarding the cgi module - use the html module when available
* Misc minor improvements
* tests: Be compatible with latest pytest
* tests: Make tests pass after 2024
* tests: Add py37 as a test target
* docs: Correct instructions to run tests
* docs: Fix misc typos
-------------------------------------------------------------------
Wed Jun 5 09:39:57 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
- Update to 4.7.0
* Add support for MDQ signature verification
* Raise XmlsecError if xmlsec1 operations do not succeed
* Handle non standard response error status codes correctly
* Remove the python-future dependency and only use six
-------------------------------------------------------------------
Fri Dec 7 10:43:13 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 4.6.5:
* Many many changes everywhere, see CHANGELOG.md for details
- Use github tarball to include license/tests
-------------------------------------------------------------------
Tue Dec 4 12:52:47 UTC 2018 - Matej Cepl <mcepl@suse.com>
- Remove superfluous devel dependency for noarch package
-------------------------------------------------------------------
Wed Oct 10 06:08:56 UTC 2018 - Dirk Mueller <dmueller@suse.com>
- cleanup filelist
-------------------------------------------------------------------
Tue Oct 9 15:50:52 UTC 2018 - Colleen Murphy <comurphy@suse.com>
- Replace python-pycryptodomex dep with python-cryptography
- Dependency was swapped in afdf5b4
-------------------------------------------------------------------
Wed Nov 29 08:25:34 UTC 2017 - okurz@suse.com
- Add missing runtime dependency on 'defusedxml'
- Add obsolete suse_version special handling
-------------------------------------------------------------------
Mon Oct 30 22:27:36 UTC 2017 - michael@stroeder.com
- update to 4.5.0
-------------------------------------------------------------------
Mon Jun 19 08:57:42 UTC 2017 - okurz@suse.com
- Convert to singlespec
-------------------------------------------------------------------
Tue Nov 22 15:18:26 UTC 2016 - dmueller@suse.com
- fix requires
-------------------------------------------------------------------
Thu Nov 17 14:42:09 UTC 2016 - michael@stroeder.com
- update to 4.4.0
- added LICENSE.txt to docs
-------------------------------------------------------------------
Fri Feb 26 13:14:29 UTC 2016 - tbechtold@suse.com
- Require python-python-dateutil. package was renamed
-------------------------------------------------------------------
Tue Oct 13 21:31:03 UTC 2015 - dmueller@suse.com
- add pycrypto/pyOpenSSL dependency
-------------------------------------------------------------------
Tue Sep 1 07:17:52 UTC 2015 - tbechtold@suse.com
- Move python-repoze.who from Recommends to Requires. It's needed.
-------------------------------------------------------------------
Thu Jul 30 19:30:53 UTC 2015 - tbechtold@suse.com
- Add missing Requires
-------------------------------------------------------------------
Thu Jul 16 15:40:39 UTC 2015 - seife+obs@b1-systems.com
- fix build on non-SUSE distributions whose rpm does not know
"Recommends"
-------------------------------------------------------------------
Wed Jun 10 08:48:46 UTC 2015 - dmueller@suse.com
- update to 2.4.0:
* A couple of security fixes plus maintenance updates.
-------------------------------------------------------------------
Tue Oct 15 07:41:04 UTC 2013 - speilicke@suse.com
- Initial version
Reference in New Issue View Git Blame Copy Permalink