2021-01-21 08:32:38 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 20 23:41:54 UTC 2021 - Michael Ströder <michael@stroeder.com>
|
|
|
|
|
|
|
|
|
|
- Update to 6.5.1:
|
|
|
|
|
* Fix the parser to take into account both the xs and xsd namespace prefixes
|
|
|
|
|
|
2021-01-20 21:32:16 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 20 20:12:26 UTC 2021 - Michael Ströder <michael@stroeder.com>
|
|
|
|
|
|
|
|
|
|
- Update to 6.5.0 - Security release
|
|
|
|
|
* Fix processing of invalid SAML XML documents - CVE-2021-21238
|
|
|
|
|
* Fix unspecified xmlsec1 key-type preference - CVE-2021-21239
|
|
|
|
|
* Add more tests regarding XSW attacks
|
|
|
|
|
* Add XML Schemas for SAML2 and common extensions
|
|
|
|
|
* Fix the XML parser to not break on ePTID AttributeValues
|
|
|
|
|
* Fix the initialization value of the return_addrs property of the StatusResponse object
|
|
|
|
|
* Fix SWAMID entity-category policy regarding eduPersonTargetedID
|
|
|
|
|
* data: use importlib to load package data (backwards compatibility through the importlib_resources package)
|
|
|
|
|
* docs: improve the documentation for the signing_algorithm and digest_algorithm options
|
|
|
|
|
* examples: fix the logging configuration of the example-IdP
|
|
|
|
|
* tests: allow tests to pass on 32bit systems by properly choosing dates in test XML documents
|
|
|
|
|
* tests: improvements on the generation of response and assertion objects
|
|
|
|
|
* tests: expand tests on python-3.9 and python-3.10-dev
|
|
|
|
|
- added new build dependencies:
|
|
|
|
|
* python3-importlib-resources
|
|
|
|
|
* python3-xmlschema
|
|
|
|
|
* update-alternatives
|
|
|
|
|
- removed obsolete avoid-too-large-dates.patch
|
|
|
|
|
- replaced %python3_alternative by %python_alternative
|
|
|
|
|
|
2021-01-06 10:50:59 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 6 10:49:48 UTC 2021 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add avoid-too-large-dates.patch to avoid test failures on i586
|
|
|
|
|
(Y38K bug; gh#IdentityPython/pysaml2#759)
|
|
|
|
|
|
2021-01-04 21:25:57 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 4 21:25:04 UTC 2021 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
- Skip test test_filter_ava_registration_authority_1
|
|
|
|
|
(gh#IdentityPython/pysaml2#759).
|
|
|
|
|
|
2020-12-20 10:05:52 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Dec 20 10:04:41 UTC 2020 - Dirk Müller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
- update to 6.3.1:
|
|
|
|
|
- Fix extraction of RegistrationInfo when no information is available
|
|
|
|
|
- Fix http_info struct to include status-code
|
|
|
|
|
- Allow to specify policy configurations based on the registration authority.
|
|
|
|
|
- Add new configuration option `logout_responses_signed` to sign logout responses.
|
|
|
|
|
- When available and appropriate return the ResponseLocation along with the Location
|
|
|
|
|
attribute.
|
|
|
|
|
- Always use base64.encodebytes; base64.encodestring has been dropped.
|
|
|
|
|
- Examples: fix IdP example that was outputing debug statements on stdout that became
|
|
|
|
|
part of its metadata.
|
|
|
|
|
- CI/CD: Use Ubuntu bionic as the host to run the CI/CD process.
|
|
|
|
|
- CI/CD: Pre-releases are now available on [test.pypi.org][pypi.test.pysaml2]. Each
|
|
|
|
|
commit/merge on the master branch autotically creates a new pre-release. To install a
|
|
|
|
|
prelease, run:
|
|
|
|
|
- Fix the generated xsd:ID format for EncryptedData and EncryptedKey elements
|
|
|
|
|
- Set the default value for the NameFormat attribute to unspecified when parsing
|
|
|
|
|
- Support arbitrary entity attributes
|
|
|
|
|
- Replace all asserts with proper checks
|
|
|
|
|
- Allow request signing in artifact2message
|
|
|
|
|
- Support logging configuration through the python logger
|
|
|
|
|
- Fix wrong identifiers for ecdsa algos
|
|
|
|
|
- Fix automatic inversion of attribute map files
|
|
|
|
|
- Factor out common codepaths in attribute_converter
|
|
|
|
|
- Remove uneeded exception logging
|
|
|
|
|
- Docs: Update configuration options documentation
|
|
|
|
|
- Examples: Support both str and bytes in SAML requests on the example idp
|
|
|
|
|
- Examples: Update to key generation to 2048 bits
|
|
|
|
|
|
2020-07-14 08:33:35 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jul 11 18:07:25 UTC 2020 - Michael Ströder <michael@stroeder.com>
|
|
|
|
|
|
|
|
|
|
- update to 6.1.0:
|
|
|
|
|
* Fix signed logout requests flag
|
|
|
|
|
* Differentiate between metadata NameIDFormat and AuthnRequest NameIDPolicy Format
|
|
|
|
|
- Users using `name_id_format` to set the `<NameIDPolicy Format="...">` attribute now
|
|
|
|
|
need to use the new configuration option `name_id_policy_format`.
|
|
|
|
|
* Fix documentation formatting
|
|
|
|
|
* Fix generation of signed metadata
|
|
|
|
|
* Add attribute mappings used by SwedenConnect (DIGG, INERA and PKIX specifications)
|
|
|
|
|
* Update SWAMID entity category
|
|
|
|
|
* Document the `additional_cert_files` configuration option
|
|
|
|
|
|
2020-07-11 06:33:14 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 10 12:29:12 UTC 2020 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
- update to 5.3.0:
|
|
|
|
|
- Fix check for nameid_format set to the string "None" in the configuration
|
|
|
|
|
- Fix presence of empty eIDAS RequestedAttributes element on AuthnRequest
|
|
|
|
|
- Refactor create_authn_request method to be easier to reason about
|
|
|
|
|
- Fix NameIDPolicy checks for allowed Format and allowCreate values
|
|
|
|
|
|
2020-06-14 08:58:25 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Jun 14 08:57:41 UTC 2020 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
- update to 5.1.0:
|
|
|
|
|
- support eIDAS RequestedAttributes per AuthnRequest
|
|
|
|
|
- fix xmlsec1 --id-attr configuration option value
|
|
|
|
|
- do not remove existing disco URL query params
|
|
|
|
|
- load attribute maps in predictable order
|
|
|
|
|
- better error message when AudienceRestriction does not validate
|
|
|
|
|
- always use base64.encodebytes instead of base64.encodestring
|
|
|
|
|
- update the eIDAS attribute mapping for legal person
|
|
|
|
|
- fix py_compile warnings
|
|
|
|
|
- fix pylint errors and warnings
|
|
|
|
|
- various small fixes
|
|
|
|
|
- add Python3.8 as supported
|
|
|
|
|
- tests: fix validity dates
|
|
|
|
|
- docs: document default value for 'want_response_signed'
|
|
|
|
|
|
2020-05-05 12:54:25 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 5 12:50:42 UTC 2020 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
- Don't use %python3_only command, but properly use alternatives.
|
2020-05-05 18:02:41 +00:00
|
|
|
- Skip failing tests on i586 (gh#IdentityPython/pysaml2#682)
|
2020-05-05 12:54:25 +00:00
|
|
|
|
2020-03-14 16:01:08 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Mar 14 15:57:25 UTC 2020 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
- update to 5.0.0:
|
|
|
|
|
- Fix XML Signature Wrapping (XSW) vulnerabilities - CVE-2020-5390
|
|
|
|
|
- Add freshness period feature for MetaDataMDX
|
|
|
|
|
- Fix bug in duration calculation in time_util library
|
|
|
|
|
- Fix ipv6 validation to accommodate for addresses with brackets
|
|
|
|
|
- Fix xmlsec temporary files deletions
|
|
|
|
|
- Add method to get supported algorithms from metadata
|
|
|
|
|
- Add mdstore method to extract assurance certifications
|
|
|
|
|
- Add mdstore method to extract contact_person data
|
|
|
|
|
- Add attribute mappings from the Swiss eduPerson Schema
|
|
|
|
|
- Make AESCipher and Fernet interfaces compatible
|
|
|
|
|
- Remove deprecated saml2.aes module
|
|
|
|
|
- Remove deprecated saml2.extensions.ui module
|
|
|
|
|
- Replace deprecated mongodb operations
|
|
|
|
|
- Rename ToOld error to TooOld
|
|
|
|
|
- Fix pytest warnings
|
|
|
|
|
- Mock tests that need a network connection
|
|
|
|
|
- Start dropping python2 support
|
|
|
|
|
- Add mdstore methods to extract mdui uiinfo elements
|
|
|
|
|
- Add attribute mapping for umbrellaID attributes
|
|
|
|
|
- Fix logic error in pick_binding method for Entity class
|
|
|
|
|
- Validate the audience of assertions regardless of a response being unsolicited
|
|
|
|
|
- Fix PKCS_9 saml_url prefix
|
|
|
|
|
- docs: Fix warnings from docs generation
|
|
|
|
|
- docs: Update release instructions regarding branch releases
|
|
|
|
|
- docs: Fix list formatting on IdP example page
|
|
|
|
|
- docs: Update pysaml2 options doc with `name_id_format_allow_create`
|
|
|
|
|
- misc: fix various typos
|
|
|
|
|
|
2020-01-07 11:52:07 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 7 11:37:57 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
- Use python dbm dependency instead of legacy gdbm
|
|
|
|
|
|
2019-07-22 15:04:46 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 22 14:57:53 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to 4.8.0:
|
|
|
|
|
* Refactor the way ForceAuthn is set: check for "true" and "1"
|
|
|
|
|
* Allow to set NameQualifier and SPNameQualifier attributes for ePTID
|
|
|
|
|
* Parse assertions with Holder-of-Key profile
|
|
|
|
|
* Add created_at timestamps to all mongodb documents
|
|
|
|
|
* Look for existing persistent id's before creating new ones
|
|
|
|
|
* Do not add AllowCreate property for default transient NameID
|
|
|
|
|
* Enable entity category import from module search path
|
|
|
|
|
* Add SAML subject identifier attributes to saml2_uri attributemap
|
|
|
|
|
* Fix deprecation warning regarding the cgi module - use the html module when available
|
|
|
|
|
* Misc minor improvements
|
|
|
|
|
* tests: Be compatible with latest pytest
|
|
|
|
|
* tests: Make tests pass after 2024
|
|
|
|
|
* tests: Add py37 as a test target
|
|
|
|
|
* docs: Correct instructions to run tests
|
|
|
|
|
* docs: Fix misc typos
|
|
|
|
|
|
2019-06-05 10:21:45 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 5 09:39:57 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to 4.7.0
|
|
|
|
|
* Add support for MDQ signature verification
|
|
|
|
|
* Raise XmlsecError if xmlsec1 operations do not succeed
|
|
|
|
|
* Handle non standard response error status codes correctly
|
|
|
|
|
* Remove the python-future dependency and only use six
|
|
|
|
|
|
2018-12-07 11:16:24 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 7 10:43:13 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to 4.6.5:
|
|
|
|
|
* Many many changes everywhere, see CHANGELOG.md for details
|
|
|
|
|
- Use github tarball to include license/tests
|
|
|
|
|
|
2018-12-04 13:54:13 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 4 12:52:47 UTC 2018 - Matej Cepl <mcepl@suse.com>
|
|
|
|
|
|
|
|
|
|
- Remove superfluous devel dependency for noarch package
|
|
|
|
|
|
2018-10-10 06:09:04 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Oct 10 06:08:56 UTC 2018 - Dirk Mueller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
- cleanup filelist
|
|
|
|
|
|
2018-10-09 15:55:30 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 9 15:50:52 UTC 2018 - Colleen Murphy <comurphy@suse.com>
|
|
|
|
|
|
|
|
|
|
- Replace python-pycryptodomex dep with python-cryptography
|
|
|
|
|
- Dependency was swapped in afdf5b4
|
|
|
|
|
|
2017-12-02 22:15:35 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 29 08:25:34 UTC 2017 - okurz@suse.com
|
|
|
|
|
|
|
|
|
|
- Add missing runtime dependency on 'defusedxml'
|
|
|
|
|
- Add obsolete suse_version special handling
|
|
|
|
|
|
2017-11-01 14:39:05 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 30 22:27:36 UTC 2017 - michael@stroeder.com
|
|
|
|
|
|
|
|
|
|
- update to 4.5.0
|
|
|
|
|
|
2017-06-30 11:03:36 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 19 08:57:42 UTC 2017 - okurz@suse.com
|
|
|
|
|
|
|
|
|
|
- Convert to singlespec
|
|
|
|
|
|
2016-11-22 15:18:34 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 22 15:18:26 UTC 2016 - dmueller@suse.com
|
|
|
|
|
|
|
|
|
|
- fix requires
|
|
|
|
|
|
2016-11-18 10:32:48 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 17 14:42:09 UTC 2016 - michael@stroeder.com
|
|
|
|
|
|
|
|
|
|
- update to 4.4.0
|
|
|
|
|
- added LICENSE.txt to docs
|
|
|
|
|
|
2016-02-26 15:12:05 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 26 13:14:29 UTC 2016 - tbechtold@suse.com
|
|
|
|
|
|
|
|
|
|
- Require python-python-dateutil. package was renamed
|
|
|
|
|
|
2015-10-14 06:22:07 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 13 21:31:03 UTC 2015 - dmueller@suse.com
|
|
|
|
|
|
|
|
|
|
- add pycrypto/pyOpenSSL dependency
|
|
|
|
|
|
2015-09-02 11:58:03 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 1 07:17:52 UTC 2015 - tbechtold@suse.com
|
|
|
|
|
|
|
|
|
|
- Move python-repoze.who from Recommends to Requires. It's needed.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 30 19:30:53 UTC 2015 - tbechtold@suse.com
|
|
|
|
|
|
|
|
|
|
- Add missing Requires
|
|
|
|
|
|
2015-07-27 06:29:40 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 16 15:40:39 UTC 2015 - seife+obs@b1-systems.com
|
|
|
|
|
|
|
|
|
|
- fix build on non-SUSE distributions whose rpm does not know
|
|
|
|
|
"Recommends"
|
|
|
|
|
|
2015-06-12 08:48:53 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 10 08:48:46 UTC 2015 - dmueller@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 2.4.0:
|
|
|
|
|
* A couple of security fixes plus maintenance updates.
|
|
|
|
|
|
2013-10-16 09:09:56 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 15 07:41:04 UTC 2013 - speilicke@suse.com
|
|
|
|
|
|
|
|
|
|
- Initial version
|
|
|
|
|
|
