14
0

- update to 1.25 (bsc#1132663, CVE-2019-11236):

* Require and validate certificates by default when using HTTPS
  * Upgraded ``urllib3.utils.parse_url()`` to be RFC 3986 compliant.
  * Added support for ``key_password`` for ``HTTPSConnectionPool`` to use
    encrypted ``key_file`` without creating your own ``SSLContext`` object.
  * Add TLSv1.3 support to CPython, pyOpenSSL, and SecureTransport ``SSLContext``
    implementations. (Pull #1496)
  * Switched the default multipart header encoder from RFC 2231 to HTML 5 working draft.
  * Fixed issue where OpenSSL would block if an encrypted client private key was
    given and no password was given. Instead an ``SSLError`` is raised.
  * Added support for Brotli content encoding. It is enabled automatically if
  ``brotlipy`` package is installed which can be requested with
  ``urllib3[brotli]`` extra.
  * Drop ciphers using DSS key exchange from default TLS cipher suites.
    Improve default ciphers when using SecureTransport.
  * Implemented a more efficient ``HTTPResponse.__iter__()`` method.
- Drop urllib3-test-ssl-drop-sslv3.patch . No longer needed

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-urllib3?expand=0&rev=59
This commit is contained in:
Thomas Bechtold
2019-04-23 04:14:26 +00:00
committed by Git OBS Bridge
parent 51f22ebfdd
commit 3c7026ea2d
6 changed files with 31 additions and 22 deletions

View File

@@ -31,7 +31,7 @@ Name: python-urllib3-%{flavor}
%else
Name: python-urllib3
%endif
Version: 1.24.2
Version: 1.25
Release: 0
Summary: HTTP library with thread-safe connection pooling, file post, and more
License: MIT
@@ -41,8 +41,6 @@ Source: https://files.pythonhosted.org/packages/source/u/urllib3/urllib3
# PATCH-FEATURE-UPSTREAM -- use set_default_verify_paths() if no certificate path is supplied
# should be removed in the future, see SR#437853
Patch2: urllib3-ssl-default-context.patch
# PATCH-FIX-OPENSUSE -- do not use unsupported SSLv3 in tests
Patch3: urllib3-test-ssl-drop-sslv3.patch
# PATCH-FIX-UPSTREAM python-urllib3-recent-date.patch gh#shazow/urllib3#1303, boo#1074247 dimstar@opensuse.org -- Fix test suite, use correct date
Patch4: python-urllib3-recent-date.patch
BuildRequires: %{python_module PySocks}
@@ -91,7 +89,6 @@ Highlights
%prep
%setup -q -n urllib3-%{version}
%patch2 -p1
%patch3 -p1
%patch4 -p1
find . -type f -exec chmod a-x '{}' \;