python/python-service_identity
SHA256
14
0
Fork 0
forked from pool/python-service_identity
Code Pull Requests Activity

- update to 24.1.0:

Browse Source 
* If a certificate doesn't contain any `subjectAltName`s, we
    now raise `service_identity.CertificateError` instead of
    `service_identity.VerificationError` to make the problem
    easier to debug.
    - Since Chrome 58 and Firefox 48 both don’t accept certificates
      that contain only a Common Name, its usage is hereby
      deprecated in service_identity too. We have been raising
      a warning since 16.0.0 and the support will be removed in
    - When service_identity.SubjectAltNameWarning is raised, the
    - Wildcards (*) are now only allowed if they are the leftmost
      label in a certificate. This is common practice by all major

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-service_identity?expand=0&rev=34
This commit is contained in:
Dirk Mueller
2024-01-20 20:31:31 +00:00
committed by Git OBS Bridge
parent 3c4686a635
commit dac99b85a5
4 changed files with 21 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
python-service_identity.changes
View File

@@ -1,3 +1,12 @@
-------------------------------------------------------------------
Sat Jan 20 20:31:18 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 24.1.0:
* If a certificate doesn't contain any `subjectAltName`s, we
now raise `service_identity.CertificateError` instead of
`service_identity.VerificationError` to make the problem
easier to debug.
-------------------------------------------------------------------
Mon Sep 18 09:42:13 UTC 2023 - pgajdos@suse.com
@@ -115,19 +124,19 @@ Mon Sep 24 13:16:17 UTC 2018 - ecsos@opensuse.org
- Update to 17.0.0:
* Deprecations:
- Since Chrome 58 and Firefox 48 both don’t accept certificates
that contain only a Common Name, its usage is hereby
deprecated in service_identity too. We have been raising
a warning since 16.0.0 and the support will be removed in
- Since Chrome 58 and Firefox 48 both don’t accept certificates
that contain only a Common Name, its usage is hereby
deprecated in service_identity too. We have been raising
a warning since 16.0.0 and the support will be removed in
mid-2018 for good.
* Changes:
- When service_identity.SubjectAltNameWarning is raised, the
- When service_identity.SubjectAltNameWarning is raised, the
Common Name of the certificate is now included in the warning
message. #17
- Added cryptography.x509 backend for verifying certificates.
#18
- Wildcards (*) are now only allowed if they are the leftmost
label in a certificate. This is common practice by all major
- Wildcards (*) are now only allowed if they are the leftmost
label in a certificate. This is common practice by all major
browsers. #19
-------------------------------------------------------------------