Accepting request 1241218 from home:ecsos:python

- Update to 25.0.0

python-cryptography is now in version 44 in the repos!

OBS-URL: https://build.opensuse.org/request/show/1241218
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pyOpenSSL?expand=0&rev=118

python-pyOpenSSL.changes

@@ -1,3 +1,42 @@
+-------------------------------------------------------------------
+Wed Jan 29 15:05:24 UTC 2025 - ecsos <ecsos@opensuse.org>
+
+- Update to 25.0.0
+  * Backward-incompatible changes: -
+  * Deprecations: -
+  * Changes:
+    - Corrected type annotations on Context.set_alpn_select_callback,
+      Context.set_session_cache_mode, Context.set_options, Context.set_mode,
+      X509.subject_name_hash, and X509Store.load_locations.
+    - Deprecated APIs are now marked using warnings.deprecated. mypy will emit deprecation notices
+      for them when used with --enable-error-code deprecated.
+- Changes from 24.3.0
+  * Backward-incompatible changes:
+    - Removed the deprecated OpenSSL.crypto.CRL, OpenSSL.crypto.Revoked, OpenSSL.crypto.dump_crl,
+      and OpenSSL.crypto.load_crl. cryptography.x509's CRL functionality should be used instead.
+    - Removed the deprecated OpenSSL.crypto.sign and OpenSSL.crypto.verify.
+      cryptography.hazmat.primitives.asymmetric's signature APIs should be used instead.
+  * Deprecations:
+    - Deprecated OpenSSL.rand - callers should use os.urandom() instead.
+    - Deprecated add_extensions and get_extensions on OpenSSL.crypto.X509Req and OpenSSL.crypto.X509.
+      These should have been deprecated at the same time X509Extension was. Users should use pyca/cryptography's X.509 APIs instead.
+    - Deprecated OpenSSL.crypto.get_elliptic_curves and OpenSSL.crypto.get_elliptic_curve,
+      as well as passing the reult of them to OpenSSL.SSL.Context.set_tmp_ecdh,
+      users should instead pass curves from cryptography.
+    - Deprecated passing X509 objects to OpenSSL.SSL.Context.use_certificate, OpenSSL.SSL.Connection.use_certificate,
+      OpenSSL.SSL.Context.add_extra_chain_cert, and OpenSSL.SSL.Context.add_client_ca, users should instead
+      pass cryptography.x509.Certificate instances. This is in preparation for deprecating pyOpenSSL's X509 entirely.
+    - Deprecated passing PKey objects to OpenSSL.SSL.Context.use_privatekey and OpenSSL.SSL.Connection.use_privatekey,
+      users should instead pass cryptography priate key instances. This is in preparation for deprecating pyOpenSSL's PKey entirely.
+  * Changes:
+    - cryptography maximum version has been increased to 44.0.x.
+    - OpenSSL.SSL.Connection.get_certificate, OpenSSL.SSL.Connection.get_peer_certificate,
+      OpenSSL.SSL.Connection.get_peer_cert_chain, and OpenSSL.SSL.Connection.get_verified_chain
+      now take an as_cryptography keyword-argument. When True is passed then
+      cryptography.x509.Certificate are returned, instead of OpenSSL.crypto.X509.
+      In the future, passing False (the default) will be deprecated.
+- Rebase skip-networked-test.patch.
+
 -------------------------------------------------------------------
 Mon Jan 13 22:33:05 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
 

python-pyOpenSSL.spec

@@ -26,7 +26,7 @@
 %endif
 %{?sle15_python_module_pythons}
 Name:           python-pyOpenSSL%{psuffix}
-Version:        24.2.1
+Version:        25.0.0
 Release:        0
 Summary:        Python wrapper module around the OpenSSL library
 License:        Apache-2.0
@@ -35,18 +35,19 @@ Source:         https://files.pythonhosted.org/packages/source/p/pyopenssl/pyope
 # PATCH-FIX-UPSTREAM skip-networked-test.patch gh#pyca/pyopenssl#68 mcepl@suse.com
 # Mark tests requiring network access
 Patch0:         skip-networked-test.patch
+BuildRequires:  %{python_module base >= 3.7}
 BuildRequires:  %{python_module cffi}
 BuildRequires:  %{python_module setuptools}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
 Requires:       python-cffi
-Requires:       (python-cryptography >= 41.0.5 with python-cryptography < 44)
+Requires:       (python-cryptography >= 41.0.5 with python-cryptography < 45)
 Provides:       pyOpenSSL = %{version}
 Provides:       pyopenssl = %{version}-%release
 %if %{without test}
 BuildArch:      noarch
 %else
-BuildRequires:  %{python_module cryptography >= 41.0.5 with %python-cryptography < 44}
+BuildRequires:  %{python_module cryptography >= 41.0.5 with %python-cryptography < 45}
 BuildRequires:  %{python_module pretend}
 BuildRequires:  %{python_module pyOpenSSL >= %version}
 BuildRequires:  %{python_module pytest >= 3.0.1}

skip-networked-test.patch

@@ -1,29 +1,29 @@
-Index: pyOpenSSL-24.1.0/tests/test_ssl.py
+Index: pyopenssl-25.0.0/tests/test_ssl.py
 ===================================================================
---- pyOpenSSL-24.1.0.orig/tests/test_ssl.py
+--- pyopenssl-25.0.0.orig/tests/test_ssl.py
-+++ pyOpenSSL-24.1.0/tests/test_ssl.py
++++ pyopenssl-25.0.0/tests/test_ssl.py
-@@ -1249,6 +1249,7 @@ class TestContext:
+@@ -1303,6 +1303,7 @@ class TestContext:
          reason="set_default_verify_paths appears not to work on Windows.  "
          "See LP#404343 and LP#404344.",
      )
 +    @pytest.mark.network
-     def test_set_default_verify_paths(self):
+     def test_set_default_verify_paths(self) -> None:
          """
          `Context.set_default_verify_paths` causes the platform-specific CA
-Index: pyOpenSSL-24.1.0/setup.cfg
+Index: pyopenssl-25.0.0/setup.cfg
 ===================================================================
---- pyOpenSSL-24.1.0.orig/setup.cfg
+--- pyopenssl-25.0.0.orig/setup.cfg
-+++ pyOpenSSL-24.1.0/setup.cfg
++++ pyopenssl-25.0.0/setup.cfg
 @@ -11,4 +11,3 @@ doc_files = doc/_build/html
  [egg_info]
  tag_build = 
  tag_date = 0
 -
-Index: pyOpenSSL-24.1.0/pyproject.toml
+Index: pyopenssl-25.0.0/pyproject.toml
 ===================================================================
---- pyOpenSSL-24.1.0.orig/pyproject.toml
+--- pyopenssl-25.0.0.orig/pyproject.toml
-+++ pyOpenSSL-24.1.0/pyproject.toml
++++ pyopenssl-25.0.0/pyproject.toml
-@@ -42,6 +42,9 @@ ignore_missing_imports = true
+@@ -39,6 +39,9 @@ ignore_missing_imports = true
  [tool.pytest.ini_options]
  addopts = "-r s --strict-markers"
  testpaths = ["tests"]