diff --git a/cryptography-2.9.2.tar.gz b/cryptography-2.9.2.tar.gz deleted file mode 100644 index 8135f4d..0000000 --- a/cryptography-2.9.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a0c30272fb4ddda5f5ffc1089d7405b7a71b0b0f51993cb4e5dbb4590b2fc229 -size 517571 diff --git a/cryptography-2.9.2.tar.gz.asc b/cryptography-2.9.2.tar.gz.asc deleted file mode 100644 index df9d34e..0000000 --- a/cryptography-2.9.2.tar.gz.asc +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQEyBAABCAAdFiEEBf2foWz3VzUNkaVgI1rl8Sn57ZgFAl6gzhQACgkQI1rl8Sn5 -7Zh0nAf4ggT/Ld981REP/HrVwJKGp6gn9ViqmToHOacI3XeP70Rz+7h4eg/548Bf -F4oH0IAkwV4TRUXtJV/fsi5OmnCD8EktQqxpzUQ9yNfT3thj/X2594GUD5+Tm/O9 -162xy/mFqa8XgIjXB5NaAySrpegMEf6lPpOOf7hI0mHcsQ3b4EYp5/of0dj0MgQV -HgrAKtdpLKWSeFLL19bqXHpBloYOj9kFuQs+2qVYtu0gIzsavGC8kKrvw6ir8i5o -FqNumdvcXYWHjkF/46BICd5ZUNY5YrYGGsK39CBQRFgEkoD+ElVsh9anwoNeUvxu -qilLKGLbD6NteTWcxjnqJJGnO2+7 -=VVJo ------END PGP SIGNATURE----- diff --git a/cryptography-3.0.tar.gz b/cryptography-3.0.tar.gz new file mode 100644 index 0000000..158a2f6 --- /dev/null +++ b/cryptography-3.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8e924dbc025206e97756e8903039662aa58aa9ba357d8e1d8fc29e3092322053 +size 534725 diff --git a/cryptography-3.0.tar.gz.asc b/cryptography-3.0.tar.gz.asc new file mode 100644 index 0000000..d17911b --- /dev/null +++ b/cryptography-3.0.tar.gz.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQEzBAABCAAdFiEEBf2foWz3VzUNkaVgI1rl8Sn57ZgFAl8WGscACgkQI1rl8Sn5 +7ZiG/Af/dlShgMX5PLP6G+S9iXdSX9Zu6rlJUeQ8QkoaL268KoBe6Y+LHRwDoblk +8iIwN3KYxNqVqEVrve/nr3ju5YoFWXjrA755W13j5ehLN1Tn+s9Apxe2Ye8OhSNa +MrIdzWAMaEl2DpArr2zBxockEuLqb06Uj29YfYQKcmSKwFvzmJtozw1VscwyQS70 +GJ4MzWnbvIIbwpDlwNDiHkR8OE3JR5aDDuYdX0ADWHxK2ExCKS6kP4gI9pamVt6L +RgmJKHfjrbv/hhgrg64PjXH8WRXMKDXs6j5zGRo6Gvg4gnyISvQF7+1piaIsp9bP +BFyuqnIGeMqhwcC/dtGsq/fxJOHurw== +=mZPL +-----END PGP SIGNATURE----- diff --git a/disable-uneven-sizes-tests.patch b/disable-uneven-sizes-tests.patch index 2a932b1..4b90fa9 100644 --- a/disable-uneven-sizes-tests.patch +++ b/disable-uneven-sizes-tests.patch @@ -1,14 +1,14 @@ -Index: cryptography-1.0/tests/hazmat/primitives/test_rsa.py +Index: cryptography-3.0/tests/hazmat/primitives/test_rsa.py =================================================================== ---- cryptography-1.0.orig/tests/hazmat/primitives/test_rsa.py -+++ cryptography-1.0/tests/hazmat/primitives/test_rsa.py -@@ -91,7 +91,8 @@ class TestRSA(object): +--- cryptography-3.0.orig/tests/hazmat/primitives/test_rsa.py ++++ cryptography-3.0/tests/hazmat/primitives/test_rsa.py +@@ -174,7 +174,8 @@ class TestRSA(object): ("public_exponent", "key_size"), itertools.product( - (3, 5, 65537), -- (1024, 1025, 1026, 1027, 1028, 1029, 1030, 1031, 1536, 2048) -+ #(1024, 1025, 1026, 1027, 1028, 1029, 1030, 1031, 1536, 2048) -+ (1024, 1026, 1028, 1030, 1536, 2048) - ) + (3, 65537), +- (1024, 1025, 1026, 1027, 1028, 1029, 1030, 1031, 1536, 2048), ++ #(1024, 1025, 1026, 1027, 1028, 1029, 1030, 1031, 1536, 2048), ++ (1024, 1026, 1028, 1030, 1536, 2048), + ), ) def test_generate_rsa_keys(self, backend, public_exponent, key_size): diff --git a/python-cryptography.changes b/python-cryptography.changes index ede2f37..17e50e0 100644 --- a/python-cryptography.changes +++ b/python-cryptography.changes @@ -1,3 +1,29 @@ +------------------------------------------------------------------- +Tue Jul 28 17:16:47 UTC 2020 - Ondřej Súkup + +- update to 3.0 +- refreshed disable-uneven-sizes-tests.patch and skip_openssl_memleak_test.patch + * Removed support for passing an Extension instance + to from_issuer_subject_key_identifier(), as per our deprecation policy. + * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed + * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer. + * RSA generate_private_key() no longer accepts public_exponent values except + 65537 and 3 (the latter for legacy purposes). + * X.509 certificate parsing now enforces that the version field contains + a valid value, rather than deferring this check until version is accessed. + * Deprecated support for Python 2 + * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa + private keys: load_ssh_private_key() for loading and OpenSSH for writing. + * Added support for OpenSSH certificates to load_ssh_public_key(). + * Added encrypt_at_time() and decrypt_at_time() to Fernet. + * Added support for the SubjectInformationAccess X.509 extension. + * Added support for parsing SignedCertificateTimestamps in OCSP responses. + * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid(). + * Added support for encoding attributes in certificate signing requests via add_attribute(). + * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG + instead of its own OS random engine because these versions of OpenSSL properly reseed on fork. + * Added initial support for creating PKCS12 files with serialize_key_and_certificates(). + ------------------------------------------------------------------- Fri May 15 08:44:10 UTC 2020 - Michael Ströder diff --git a/python-cryptography.spec b/python-cryptography.spec index f092976..480b051 100644 --- a/python-cryptography.spec +++ b/python-cryptography.spec @@ -1,7 +1,7 @@ # # spec file for package python-cryptography # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %bcond_without python2 Name: python-cryptography -Version: 2.9.2 +Version: 3.0 Release: 0 Summary: Python library which exposes cryptographic recipes and primitives License: Apache-2.0 OR BSD-3-Clause diff --git a/skip_openssl_memleak_test.patch b/skip_openssl_memleak_test.patch index b80c87c..96c4d5f 100644 --- a/skip_openssl_memleak_test.patch +++ b/skip_openssl_memleak_test.patch @@ -1,16 +1,18 @@ -diff --git a/tests/hazmat/backends/test_openssl_memleak.py b/tests/hazmat/backends/test_openssl_memleak.py -index 6e92e34..3280c47 100644 ---- a/tests/hazmat/backends/test_openssl_memleak.py -+++ b/tests/hazmat/backends/test_openssl_memleak.py -@@ -118,9 +118,8 @@ def assert_no_memory_leaks(s, argv=[]): +Index: cryptography-3.0/tests/hazmat/backends/test_openssl_memleak.py +=================================================================== +--- cryptography-3.0.orig/tests/hazmat/backends/test_openssl_memleak.py ++++ cryptography-3.0/tests/hazmat/backends/test_openssl_memleak.py +@@ -153,10 +153,9 @@ def assert_no_memory_leaks(s, argv=[]): def skip_if_memtesting_not_supported(): - return pytest.mark.skipif( - not Binding().lib.Cryptography_HAS_MEM_FUNCTIONS, -- reason="Requires OpenSSL memory functions (>=1.1.0)" +- reason="Requires OpenSSL memory functions (>=1.1.0)", +- ) + return pytest.mark.skip( + reason="Our FIPS openssl startup code invokes CRYPTO_malloc() which prevents later debugging via CRYPTO_set_mem_functions()" - ) ++ ) + @pytest.mark.skip_fips(reason="FIPS self-test sets allow_customize = 0")