2025-04-08 07:58:18 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Apr 8 07:29:45 UTC 2025 - Ben Greiner <code@bnavigator.de>
|
|
|
|
|
|
|
|
|
|
|
|
- Fix dependencies gh#IdentityPython/pysaml2#984
|
|
|
|
|
|
|
2025-02-28 03:02:30 +00:00
|
|
|
|
-------------------------------------------------------------------
|
2025-02-28 04:15:59 +00:00
|
|
|
|
Fri Feb 28 04:15:23 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
|
2025-02-28 03:02:30 +00:00
|
|
|
|
|
|
|
|
|
|
- Update to 7.5.2
|
|
|
|
|
|
* Include the XSD of the XML Encryption Syntax and Processing
|
|
|
|
|
|
Version 1.1 to the schema validator
|
|
|
|
|
|
- Update to 7.5.1
|
|
|
|
|
|
* deps: restrict pyOpenSSL up to v24.2.1 until it is replaced
|
|
|
|
|
|
* deps: update dependncies for the lockfile and examples
|
|
|
|
|
|
- add use-cryptography.patch to fix tests
|
|
|
|
|
|
|
2024-10-29 08:27:37 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 29 08:15:43 UTC 2024 - Dirk Müller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 7.5.0:
|
|
|
|
|
|
* Fix missing requested attributes from the ACS
|
|
|
|
|
|
* Add support for errorURL to be exposed in metadata for IdP
|
|
|
|
|
|
* Update logged message when the signature validation on the
|
|
|
|
|
|
assertion fails
|
|
|
|
|
|
* Replace imp with importlib
|
|
|
|
|
|
* deps: restrict xmlschema version
|
|
|
|
|
|
* deps: remove utility from packaging
|
|
|
|
|
|
* examples: update code and README to align with latest code
|
|
|
|
|
|
* docs: update readme with info about xmlsec1 compatibility
|
|
|
|
|
|
|
2024-02-08 12:49:41 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jan 29 13:54:33 UTC 2024 - Petr Gajdos <pgajdos@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 7.4.2:
|
|
|
|
|
|
* Add support for xmlsec1 1.3.x
|
|
|
|
|
|
* Use the set crypto_backend when creating the entity metadata
|
|
|
|
|
|
* ## 7.4.1 (2023-02-24)
|
|
|
|
|
|
* Fix subject-id requirements processing
|
|
|
|
|
|
* ## 7.4.0 (2023-02-14)
|
|
|
|
|
|
* Ensure the ID of each Signature element is unique when
|
|
|
|
|
|
signing an encrypted assertion
|
|
|
|
|
|
* Bump Python to 3.9
|
|
|
|
|
|
* dev: Add mypy configuration and type stubs
|
|
|
|
|
|
* tests: move tox.ini config into pyproject.toml
|
|
|
|
|
|
* docs: Update release instructions
|
|
|
|
|
|
* ## 7.3.0 (2023-02-14)
|
|
|
|
|
|
* During metadata generation, render extensions both for
|
|
|
|
|
|
EntityDescriptor and IdPSSODescriptor
|
|
|
|
|
|
* Fix compatibility with certain SAML implementation that
|
|
|
|
|
|
inflate messasges on the POST binding
|
|
|
|
|
|
* Update the SWAMID entity category requirements
|
|
|
|
|
|
* Fix check for NameID when it originates from an encrypted
|
|
|
|
|
|
asssertion
|
|
|
|
|
|
* Add support for pymongo `>=3.5` and `<5`
|
|
|
|
|
|
* Update README with supported specifications
|
|
|
|
|
|
* Remove dependency on the six package
|
|
|
|
|
|
* Cleanup unused imports and pythonisms for Python versions
|
|
|
|
|
|
older than 3.6
|
|
|
|
|
|
* Convert README to markdown
|
|
|
|
|
|
* Introduce flake8 to check for issues
|
|
|
|
|
|
* Use black and isort to manage formatting and imports
|
|
|
|
|
|
* Use poetry to manage the project dependencies, packaging and
|
|
|
|
|
|
versions
|
|
|
|
|
|
* Fix whitespace typos on the eIDAS schemas
|
|
|
|
|
|
* Try different logout bindings on the saml2.client level
|
|
|
|
|
|
* Add the mailLocalAddress attribute as part of the saml and
|
|
|
|
|
|
shib uri name format bundles
|
|
|
|
|
|
* Add the isMemberOf attribute as part of the basic attribute
|
|
|
|
|
|
format bundle
|
|
|
|
|
|
- drop upstreamed pymongo-4-support.patch
|
|
|
|
|
|
|
2023-06-11 20:10:34 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sun Jun 11 13:23:30 UTC 2023 - ecsos <ecsos@opensuse.org>
|
|
|
|
|
|
|
|
|
|
|
|
- Add %{?sle15_python_module_pythons}
|
|
|
|
|
|
|
2022-11-15 16:16:45 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Nov 15 14:23:13 UTC 2022 - Rolf Krahl <rolf@rotkraut.de>
|
|
|
|
|
|
|
|
|
|
|
|
- Fix dependencies according to upstream setup.cfg
|
|
|
|
|
|
|
2022-10-07 07:51:47 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Oct 6 21:56:41 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- version update to 7.2.1 (2022-08-23)
|
|
|
|
|
|
* Accept and forward sign and digest alg information when creating a metadata string
|
|
|
|
|
|
* Fix tests to comply with latest xmlschema
|
|
|
|
|
|
|
|
|
|
|
|
- version update to 7.2.0 (2022-08-10)
|
|
|
|
|
|
* Add schemas for eIDAS extensions, elements and attributes
|
|
|
|
|
|
* Add the voPerson v2 attributes mappings; see reference
|
|
|
|
|
|
* Add the registration_info_typ method on saml2.mdstore.MetadataStore to get the registration information from an EntityDescriptor services
|
|
|
|
|
|
* Allow exceptions to convey the SAML StatusCode in an error response
|
|
|
|
|
|
* Fix typo on method name under saml2.mdstore.MetadataStore; from sbibmd_scopes to shibmd_scopes
|
|
|
|
|
|
* Add partial support for xs:date AttributeValue type
|
|
|
|
|
|
* Fallback to xs:string as the type of the AttributeValue text node
|
|
|
|
|
|
* Fallback to the authn context class declaration to set the authn context class reference
|
|
|
|
|
|
* Αdd configuration option http_client_timeout to set a timeout on the HTTP calls by the httpbase module
|
|
|
|
|
|
* Load certificates using cryptography and support certificate chains
|
|
|
|
|
|
* Remove deprecated cryptography backend param
|
|
|
|
|
|
* Fix assertion policy filter: Fallback to match a known attribute or return its name
|
|
|
|
|
|
* examples: Allow multiple attributes to be returned by the idp
|
|
|
|
|
|
* tests: Minor cleanups
|
|
|
|
|
|
* docs: Reference python2 compatible fork
|
2024-10-29 08:27:37 +00:00
|
|
|
|
* misc: add pepy badges on the README file
|
2022-10-07 07:51:47 +00:00
|
|
|
|
|
2022-07-28 06:05:00 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jul 28 06:04:01 UTC 2022 - Steve Kowalik <steven.kowalik@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Add patch pymongo-4-support.patch:
|
|
|
|
|
|
* Support pymongo >= 4
|
|
|
|
|
|
|
2022-04-07 14:47:20 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Apr 7 08:37:47 UTC 2022 - pgajdos@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- version update to 7.1.2
|
|
|
|
|
|
## 7.1.2 (2022-03-04)
|
|
|
|
|
|
- fix assertion policy filter to try to resolve the local_name using the friendly name if it failed with the name_format
|
|
|
|
|
|
- reload metadata in-place to avoid memory leak
|
|
|
|
|
|
- tests: Restrict pymongo to v3
|
|
|
|
|
|
- docs: highlight installation command
|
|
|
|
|
|
## 7.1.1 (2022-02-22)
|
|
|
|
|
|
- Process and verify the metadata signature for EntitiesDescriptor and EntityDescriptor
|
|
|
|
|
|
- Fix client to be able to retry creating an AuthnRequest with a different binding
|
|
|
|
|
|
- Allow requested_authn_context to be an object
|
|
|
|
|
|
- AttributeValues are optional; allow Attributes to not have values
|
|
|
|
|
|
- Update SWAMID entity category to support https://myacademicid.org/entity-categories/esi
|
|
|
|
|
|
- Fix signing for requests with the SOAP binding
|
|
|
|
|
|
- tests: new test case for signed SOAP LogoutRequests
|
|
|
|
|
|
- docs: document the metadata node_name option for the remote source
|
|
|
|
|
|
- examples: align with latest updates
|
|
|
|
|
|
- deps: declare setuptools as a requirement for processing the package version
|
|
|
|
|
|
- build: add python 3.9 and 3.10 to classifiers
|
|
|
|
|
|
- misc: linter fixes
|
|
|
|
|
|
## 7.1.0 (2021-11-16)
|
|
|
|
|
|
- Fix signature verification for the redirect binding for AuthnRequest and
|
|
|
|
|
|
LogoutRequest.
|
|
|
|
|
|
- Include encryption KeyName in encrypted assertions.
|
|
|
|
|
|
- Add "reason" field in invalid signature errors due to invalid document format.
|
|
|
|
|
|
- New SP configuration option requested_authn_context to set the preferred
|
|
|
|
|
|
RequestedAuthnContext class reference.
|
|
|
|
|
|
- Add support for metadata refresh by adding a metadata_reload method into saml2.Entity.
|
|
|
|
|
|
This method is to be externally invoked, and to receive the same metadata
|
|
|
|
|
|
configuration as what was passed under the metadata key to saml2.Config. The method
|
|
|
|
|
|
loads a new metadata configuration and swaps it in (replacing the references across
|
|
|
|
|
|
several objects that hold a metadata reference).
|
|
|
|
|
|
- Fix SessionIndex resolution during logout.
|
|
|
|
|
|
- Fix AuthnResponse::get_subject to be able to decrypt a NameID with the given keys.
|
|
|
|
|
|
- Refactor AuthnResponse::authn_info to consider DeclRef equivalent to ClassRef.
|
|
|
|
|
|
- Ensure creation of multiple ePTIDs is handled correctly.
|
|
|
|
|
|
- Improve signature checks by ensuring the Object element is absent, enforcing allowed
|
|
|
|
|
|
transform aglorithms, enforcing allowed canonicalization methods and requiring the
|
|
|
|
|
|
enveloped-signature transform to be present.
|
|
|
|
|
|
- mdstore: Make unknown metadata extensions available through the internal metadata.
|
|
|
|
|
|
- mdstore: Fix the exception handler of the InMemoryMetaData object.
|
|
|
|
|
|
- mdstore: Fix the serialization of the MetadataStore object.
|
|
|
|
|
|
- examples: Fix code to catter changes in interfaces.
|
|
|
|
|
|
- examples: Update certificates to avoid SSL KEY TO SMALL errors.
|
|
|
|
|
|
- docs: Significant improvement on the configuration options documentation.
|
|
|
|
|
|
- docs: Fix typos.
|
|
|
|
|
|
- python-mock is not required for build
|
|
|
|
|
|
|
2021-07-03 16:03:26 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Jul 2 20:25:49 UTC 2021 - Michael Ströder <michael@stroeder.com>
|
|
|
|
|
|
|
|
|
|
|
|
- removed obsolete 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch
|
|
|
|
|
|
- Update to 7.0.1:
|
|
|
|
|
|
* 7.0.1 (2021-05-20)
|
|
|
|
|
|
- Preserve order of response bindings on IdP-initiated logout
|
|
|
|
|
|
- Fix use of expected binding on SP logout
|
|
|
|
|
|
* 7.0.0 (2021-05-18)
|
|
|
|
|
|
- **BREAKING** Replace encryption method rsa-1_5 with rsa-oaep-mgf1p
|
|
|
|
|
|
- Add documentation next to the code
|
|
|
|
|
|
* 6.5.2 (2021-05-18)
|
|
|
|
|
|
- Add shibmd_scopes metadata extractor
|
|
|
|
|
|
- Allow the Issuer element on a Response to be missing
|
|
|
|
|
|
- Respect the preferred_binding configuration for the single_logout_service
|
|
|
|
|
|
- Fix logout signature flags for redirect, post and soap requests
|
|
|
|
|
|
- Respect the logout_requests_signed configuration option
|
|
|
|
|
|
- Fix crash when applying policy on RequestedAttribute without a friendlyName
|
|
|
|
|
|
- Correctly validate IssueInstant
|
|
|
|
|
|
- Correctly handle AudienceRestriction elements with no value
|
|
|
|
|
|
- Raise InvalidAssertion exception when assertion requirements are not met
|
|
|
|
|
|
- Raise SAMLError on failure to parse a metadata file
|
|
|
|
|
|
- Raise StatusInvalidAuthnResponseStatement when the AuthnStatement is not valid
|
|
|
|
|
|
- Handle all forms of ACS endpoint specifications
|
|
|
|
|
|
- tests: Always use base64.encodebytes; base64.encodestring has been dropped
|
|
|
|
|
|
- build: Set minimum version needed for xmlschema
|
|
|
|
|
|
- docs: Update Travis CI badge from travis-ci.org to travis-ci.com
|
|
|
|
|
|
- examples: Fix example code
|
|
|
|
|
|
|
2021-04-26 12:55:15 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Apr 26 12:55:01 UTC 2021 - Dirk Müller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- add 0001-Always-use-base64.encodebytes-base64.encodestring-ha.patch
|
|
|
|
|
|
|
2021-01-25 15:06:56 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jan 25 15:06:45 UTC 2021 - Dirk Müller <dmueller@suse.com>
|
|
|
|
|
|
|
2024-10-29 08:27:37 +00:00
|
|
|
|
- update requires
|
2021-01-25 15:06:56 +00:00
|
|
|
|
|
2021-01-21 08:32:38 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jan 20 23:41:54 UTC 2021 - Michael Ströder <michael@stroeder.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 6.5.1:
|
|
|
|
|
|
* Fix the parser to take into account both the xs and xsd namespace prefixes
|
|
|
|
|
|
|
2021-01-20 21:32:16 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jan 20 20:12:26 UTC 2021 - Michael Ströder <michael@stroeder.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 6.5.0 - Security release
|
|
|
|
|
|
* Fix processing of invalid SAML XML documents - CVE-2021-21238
|
|
|
|
|
|
* Fix unspecified xmlsec1 key-type preference - CVE-2021-21239
|
|
|
|
|
|
* Add more tests regarding XSW attacks
|
|
|
|
|
|
* Add XML Schemas for SAML2 and common extensions
|
|
|
|
|
|
* Fix the XML parser to not break on ePTID AttributeValues
|
|
|
|
|
|
* Fix the initialization value of the return_addrs property of the StatusResponse object
|
|
|
|
|
|
* Fix SWAMID entity-category policy regarding eduPersonTargetedID
|
|
|
|
|
|
* data: use importlib to load package data (backwards compatibility through the importlib_resources package)
|
|
|
|
|
|
* docs: improve the documentation for the signing_algorithm and digest_algorithm options
|
|
|
|
|
|
* examples: fix the logging configuration of the example-IdP
|
|
|
|
|
|
* tests: allow tests to pass on 32bit systems by properly choosing dates in test XML documents
|
|
|
|
|
|
* tests: improvements on the generation of response and assertion objects
|
|
|
|
|
|
* tests: expand tests on python-3.9 and python-3.10-dev
|
|
|
|
|
|
- added new build dependencies:
|
|
|
|
|
|
* python3-importlib-resources
|
|
|
|
|
|
* python3-xmlschema
|
|
|
|
|
|
* update-alternatives
|
|
|
|
|
|
- removed obsolete avoid-too-large-dates.patch
|
|
|
|
|
|
- replaced %python3_alternative by %python_alternative
|
|
|
|
|
|
|
2021-01-06 10:50:59 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jan 6 10:49:48 UTC 2021 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Add avoid-too-large-dates.patch to avoid test failures on i586
|
|
|
|
|
|
(Y38K bug; gh#IdentityPython/pysaml2#759)
|
|
|
|
|
|
|
2021-01-04 21:25:57 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jan 4 21:25:04 UTC 2021 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Skip test test_filter_ava_registration_authority_1
|
|
|
|
|
|
(gh#IdentityPython/pysaml2#759).
|
|
|
|
|
|
|
2020-12-20 10:05:52 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sun Dec 20 10:04:41 UTC 2020 - Dirk Müller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 6.3.1:
|
|
|
|
|
|
- Fix extraction of RegistrationInfo when no information is available
|
|
|
|
|
|
- Fix http_info struct to include status-code
|
|
|
|
|
|
- Allow to specify policy configurations based on the registration authority.
|
|
|
|
|
|
- Add new configuration option `logout_responses_signed` to sign logout responses.
|
|
|
|
|
|
- When available and appropriate return the ResponseLocation along with the Location
|
|
|
|
|
|
attribute.
|
|
|
|
|
|
- Always use base64.encodebytes; base64.encodestring has been dropped.
|
|
|
|
|
|
- Examples: fix IdP example that was outputing debug statements on stdout that became
|
|
|
|
|
|
part of its metadata.
|
|
|
|
|
|
- CI/CD: Use Ubuntu bionic as the host to run the CI/CD process.
|
|
|
|
|
|
- CI/CD: Pre-releases are now available on [test.pypi.org][pypi.test.pysaml2]. Each
|
|
|
|
|
|
commit/merge on the master branch autotically creates a new pre-release. To install a
|
|
|
|
|
|
prelease, run:
|
|
|
|
|
|
- Fix the generated xsd:ID format for EncryptedData and EncryptedKey elements
|
|
|
|
|
|
- Set the default value for the NameFormat attribute to unspecified when parsing
|
|
|
|
|
|
- Support arbitrary entity attributes
|
|
|
|
|
|
- Replace all asserts with proper checks
|
|
|
|
|
|
- Allow request signing in artifact2message
|
|
|
|
|
|
- Support logging configuration through the python logger
|
|
|
|
|
|
- Fix wrong identifiers for ecdsa algos
|
|
|
|
|
|
- Fix automatic inversion of attribute map files
|
|
|
|
|
|
- Factor out common codepaths in attribute_converter
|
|
|
|
|
|
- Remove uneeded exception logging
|
|
|
|
|
|
- Docs: Update configuration options documentation
|
|
|
|
|
|
- Examples: Support both str and bytes in SAML requests on the example idp
|
|
|
|
|
|
- Examples: Update to key generation to 2048 bits
|
|
|
|
|
|
|
2020-07-14 08:33:35 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sat Jul 11 18:07:25 UTC 2020 - Michael Ströder <michael@stroeder.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 6.1.0:
|
|
|
|
|
|
* Fix signed logout requests flag
|
|
|
|
|
|
* Differentiate between metadata NameIDFormat and AuthnRequest NameIDPolicy Format
|
|
|
|
|
|
- Users using `name_id_format` to set the `<NameIDPolicy Format="...">` attribute now
|
|
|
|
|
|
need to use the new configuration option `name_id_policy_format`.
|
|
|
|
|
|
* Fix documentation formatting
|
|
|
|
|
|
* Fix generation of signed metadata
|
|
|
|
|
|
* Add attribute mappings used by SwedenConnect (DIGG, INERA and PKIX specifications)
|
|
|
|
|
|
* Update SWAMID entity category
|
|
|
|
|
|
* Document the `additional_cert_files` configuration option
|
|
|
|
|
|
|
2020-07-11 06:33:14 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Jul 10 12:29:12 UTC 2020 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 5.3.0:
|
|
|
|
|
|
- Fix check for nameid_format set to the string "None" in the configuration
|
|
|
|
|
|
- Fix presence of empty eIDAS RequestedAttributes element on AuthnRequest
|
|
|
|
|
|
- Refactor create_authn_request method to be easier to reason about
|
|
|
|
|
|
- Fix NameIDPolicy checks for allowed Format and allowCreate values
|
|
|
|
|
|
|
2020-06-14 08:58:25 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sun Jun 14 08:57:41 UTC 2020 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 5.1.0:
|
|
|
|
|
|
- support eIDAS RequestedAttributes per AuthnRequest
|
|
|
|
|
|
- fix xmlsec1 --id-attr configuration option value
|
|
|
|
|
|
- do not remove existing disco URL query params
|
|
|
|
|
|
- load attribute maps in predictable order
|
|
|
|
|
|
- better error message when AudienceRestriction does not validate
|
|
|
|
|
|
- always use base64.encodebytes instead of base64.encodestring
|
|
|
|
|
|
- update the eIDAS attribute mapping for legal person
|
|
|
|
|
|
- fix py_compile warnings
|
|
|
|
|
|
- fix pylint errors and warnings
|
|
|
|
|
|
- various small fixes
|
|
|
|
|
|
- add Python3.8 as supported
|
|
|
|
|
|
- tests: fix validity dates
|
|
|
|
|
|
- docs: document default value for 'want_response_signed'
|
|
|
|
|
|
|
2020-05-05 12:54:25 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue May 5 12:50:42 UTC 2020 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Don't use %python3_only command, but properly use alternatives.
|
2020-05-05 18:02:41 +00:00
|
|
|
|
- Skip failing tests on i586 (gh#IdentityPython/pysaml2#682)
|
2020-05-05 12:54:25 +00:00
|
|
|
|
|
2020-03-14 16:01:08 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sat Mar 14 15:57:25 UTC 2020 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- update to 5.0.0:
|
|
|
|
|
|
- Fix XML Signature Wrapping (XSW) vulnerabilities - CVE-2020-5390
|
|
|
|
|
|
- Add freshness period feature for MetaDataMDX
|
|
|
|
|
|
- Fix bug in duration calculation in time_util library
|
|
|
|
|
|
- Fix ipv6 validation to accommodate for addresses with brackets
|
|
|
|
|
|
- Fix xmlsec temporary files deletions
|
|
|
|
|
|
- Add method to get supported algorithms from metadata
|
|
|
|
|
|
- Add mdstore method to extract assurance certifications
|
|
|
|
|
|
- Add mdstore method to extract contact_person data
|
|
|
|
|
|
- Add attribute mappings from the Swiss eduPerson Schema
|
|
|
|
|
|
- Make AESCipher and Fernet interfaces compatible
|
|
|
|
|
|
- Remove deprecated saml2.aes module
|
|
|
|
|
|
- Remove deprecated saml2.extensions.ui module
|
|
|
|
|
|
- Replace deprecated mongodb operations
|
|
|
|
|
|
- Rename ToOld error to TooOld
|
|
|
|
|
|
- Fix pytest warnings
|
|
|
|
|
|
- Mock tests that need a network connection
|
|
|
|
|
|
- Start dropping python2 support
|
|
|
|
|
|
- Add mdstore methods to extract mdui uiinfo elements
|
|
|
|
|
|
- Add attribute mapping for umbrellaID attributes
|
|
|
|
|
|
- Fix logic error in pick_binding method for Entity class
|
|
|
|
|
|
- Validate the audience of assertions regardless of a response being unsolicited
|
|
|
|
|
|
- Fix PKCS_9 saml_url prefix
|
|
|
|
|
|
- docs: Fix warnings from docs generation
|
|
|
|
|
|
- docs: Update release instructions regarding branch releases
|
|
|
|
|
|
- docs: Fix list formatting on IdP example page
|
|
|
|
|
|
- docs: Update pysaml2 options doc with `name_id_format_allow_create`
|
|
|
|
|
|
- misc: fix various typos
|
2024-10-29 08:27:37 +00:00
|
|
|
|
|
2020-01-07 11:52:07 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jan 7 11:37:57 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Use python dbm dependency instead of legacy gdbm
|
|
|
|
|
|
|
2019-07-22 15:04:46 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jul 22 14:57:53 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 4.8.0:
|
|
|
|
|
|
* Refactor the way ForceAuthn is set: check for "true" and "1"
|
|
|
|
|
|
* Allow to set NameQualifier and SPNameQualifier attributes for ePTID
|
|
|
|
|
|
* Parse assertions with Holder-of-Key profile
|
|
|
|
|
|
* Add created_at timestamps to all mongodb documents
|
|
|
|
|
|
* Look for existing persistent id's before creating new ones
|
|
|
|
|
|
* Do not add AllowCreate property for default transient NameID
|
|
|
|
|
|
* Enable entity category import from module search path
|
|
|
|
|
|
* Add SAML subject identifier attributes to saml2_uri attributemap
|
|
|
|
|
|
* Fix deprecation warning regarding the cgi module - use the html module when available
|
|
|
|
|
|
* Misc minor improvements
|
|
|
|
|
|
* tests: Be compatible with latest pytest
|
|
|
|
|
|
* tests: Make tests pass after 2024
|
|
|
|
|
|
* tests: Add py37 as a test target
|
|
|
|
|
|
* docs: Correct instructions to run tests
|
|
|
|
|
|
* docs: Fix misc typos
|
|
|
|
|
|
|
2019-06-05 10:21:45 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jun 5 09:39:57 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 4.7.0
|
|
|
|
|
|
* Add support for MDQ signature verification
|
|
|
|
|
|
* Raise XmlsecError if xmlsec1 operations do not succeed
|
|
|
|
|
|
* Handle non standard response error status codes correctly
|
|
|
|
|
|
* Remove the python-future dependency and only use six
|
|
|
|
|
|
|
2018-12-07 11:16:24 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Dec 7 10:43:13 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Update to 4.6.5:
|
|
|
|
|
|
* Many many changes everywhere, see CHANGELOG.md for details
|
|
|
|
|
|
- Use github tarball to include license/tests
|
|
|
|
|
|
|
2018-12-04 13:54:13 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Dec 4 12:52:47 UTC 2018 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Remove superfluous devel dependency for noarch package
|
|
|
|
|
|
|
2018-10-10 06:09:04 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Oct 10 06:08:56 UTC 2018 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- cleanup filelist
|
|
|
|
|
|
|
2018-10-09 15:55:30 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 9 15:50:52 UTC 2018 - Colleen Murphy <comurphy@suse.com>
|
|
|
|
|
|
|
|
|
|
|
|
- Replace python-pycryptodomex dep with python-cryptography
|
|
|
|
|
|
- Dependency was swapped in afdf5b4
|
|
|
|
|
|
|
2017-12-02 22:15:35 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Nov 29 08:25:34 UTC 2017 - okurz@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Add missing runtime dependency on 'defusedxml'
|
|
|
|
|
|
- Add obsolete suse_version special handling
|
|
|
|
|
|
|
2017-11-01 14:39:05 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Oct 30 22:27:36 UTC 2017 - michael@stroeder.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 4.5.0
|
|
|
|
|
|
|
2017-06-30 11:03:36 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jun 19 08:57:42 UTC 2017 - okurz@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Convert to singlespec
|
|
|
|
|
|
|
2016-11-22 15:18:34 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Nov 22 15:18:26 UTC 2016 - dmueller@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- fix requires
|
|
|
|
|
|
|
2016-11-18 10:32:48 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Nov 17 14:42:09 UTC 2016 - michael@stroeder.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 4.4.0
|
|
|
|
|
|
- added LICENSE.txt to docs
|
|
|
|
|
|
|
2016-02-26 15:12:05 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Feb 26 13:14:29 UTC 2016 - tbechtold@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Require python-python-dateutil. package was renamed
|
|
|
|
|
|
|
2015-10-14 06:22:07 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 13 21:31:03 UTC 2015 - dmueller@suse.com
|
|
|
|
|
|
|
2024-10-29 08:27:37 +00:00
|
|
|
|
- add pycrypto/pyOpenSSL dependency
|
2015-10-14 06:22:07 +00:00
|
|
|
|
|
2015-09-02 11:58:03 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Sep 1 07:17:52 UTC 2015 - tbechtold@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Move python-repoze.who from Recommends to Requires. It's needed.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jul 30 19:30:53 UTC 2015 - tbechtold@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Add missing Requires
|
|
|
|
|
|
|
2015-07-27 06:29:40 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jul 16 15:40:39 UTC 2015 - seife+obs@b1-systems.com
|
|
|
|
|
|
|
|
|
|
|
|
- fix build on non-SUSE distributions whose rpm does not know
|
|
|
|
|
|
"Recommends"
|
|
|
|
|
|
|
2015-06-12 08:48:53 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jun 10 08:48:46 UTC 2015 - dmueller@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to 2.4.0:
|
|
|
|
|
|
* A couple of security fixes plus maintenance updates.
|
|
|
|
|
|
|
2013-10-16 09:09:56 +00:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 15 07:41:04 UTC 2013 - speilicke@suse.com
|
|
|
|
|
|
|
|
|
|
|
|
- Initial version
|
|
|
|
|
|
|
