Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-pynitrokey for
openSUSE:Factory checked in at 2026-05-18 17:48:52
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-pynitrokey (Old)
and /work/SRC/openSUSE:Factory/.python-pynitrokey.new.1966 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-pynitrokey"
Mon May 18 17:48:52 2026 rev:27 rq:1353805 version:0.12.2
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-pynitrokey/python-pynitrokey.changes
2026-05-07 15:47:08.608461618 +0200
+++
/work/SRC/openSUSE:Factory/.python-pynitrokey.new.1966/python-pynitrokey.changes
2026-05-18 17:50:02.421319783 +0200
@@ -1,0 +2,12 @@
+Mon May 18 11:05:35 UTC 2026 - Johannes Kastl
<[email protected]>
+
+- update to 0.12.2:
+ This release fixes the nethsm set-cluster-ca-certificate command
+ and adds the --san/--no-san options for nethsm csr.
+ * What's Changed
+ - nethsm: Add --san and --no-san options for csr by
+ @robin-nitrokey in #754
+ - Update dependencies and release v0.12.2 by @robin-nitrokey in
+ #753
+
+-------------------------------------------------------------------
Old:
----
pynitrokey-0.12.1.tar.gz
New:
----
pynitrokey-0.12.2.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-pynitrokey.spec ++++++
--- /var/tmp/diff_new_pack.DQ5lxy/_old 2026-05-18 17:50:04.313397967 +0200
+++ /var/tmp/diff_new_pack.DQ5lxy/_new 2026-05-18 17:50:04.317398132 +0200
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-pynitrokey
-Version: 0.12.1
+Version: 0.12.2
Release: 0
Summary: Python Library for Nitrokey devices
License: Apache-2.0 OR MIT
@@ -38,7 +38,7 @@
# https://github.com/Nitrokey/pynitrokey/issues/601
BuildRequires: %{python_module hidapi >= 0.14.0.post2 with %python-hidapi <
0.14.0.post3}
BuildRequires: %{python_module libusb1 >= 3 with %python-libusb1 < 4}
-BuildRequires: %{python_module nethsm >= 2.1 with %python-nethsm < 3}
+BuildRequires: %{python_module nethsm >= 2.1.1 with %python-nethsm < 3}
BuildRequires: %{python_module nitrokey >= 0.4.2 with %python-nitrokey < 0.5}
BuildRequires: %{python_module nkdfu >= 0.2 with %python-nkdfu < 0.3}
BuildRequires: %{python_module pyusb >= 1.2 with %python-pyusb < 2}
@@ -58,7 +58,7 @@
# https://github.com/Nitrokey/pynitrokey/issues/601
Requires: (python-hidapi >= 0.14.0.post2 with python-hidapi <
0.14.0.post3)
Requires: (python-libusb1 >= 3 with python-libusb1 < 4)
-Requires: (python-nethsm >= 2.1 with python-nethsm < 3)
+Requires: (python-nethsm >= 2.1.1 with python-nethsm < 3)
Requires: (python-nitrokey >= 0.4.2 with python-nitrokey < 0.5)
Requires: (python-nkdfu >= 0.2 with python-nkdfu < 0.3)
Requires: (python-pyusb >= 1.2 with python-pyusb < 2)
++++++ pynitrokey-0.12.1.tar.gz -> pynitrokey-0.12.2.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/pynitrokey-0.12.1/PKG-INFO
new/pynitrokey-0.12.2/PKG-INFO
--- old/pynitrokey-0.12.1/PKG-INFO 1970-01-01 01:00:00.000000000 +0100
+++ new/pynitrokey-0.12.2/PKG-INFO 1970-01-01 01:00:00.000000000 +0100
@@ -1,6 +1,6 @@
Metadata-Version: 2.4
Name: pynitrokey
-Version: 0.12.1
+Version: 0.12.2
Summary: Python client for Nitrokey devices
License: Apache-2.0 OR MIT
License-File: LICENSES/Apache-2.0.txt
@@ -28,7 +28,7 @@
Requires-Dist: hidapi (>=0.14,<0.15)
Requires-Dist: intelhex (>=2.3,<3)
Requires-Dist: libusb1 (>=3,<4)
-Requires-Dist: nethsm (>=2.1,<3)
+Requires-Dist: nethsm (>=2.1.1,<3)
Requires-Dist: nitrokey (>=0.4.2,<0.5)
Requires-Dist: nkdfu (>=0.2,<0.3)
Requires-Dist: pyscard (>=2,<3) ; extra == "pcsc"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/pynitrokey-0.12.1/pynitrokey/cli/nethsm.py
new/pynitrokey-0.12.2/pynitrokey/cli/nethsm.py
--- old/pynitrokey-0.12.1/pynitrokey/cli/nethsm.py 1970-01-01
01:00:00.000000000 +0100
+++ new/pynitrokey-0.12.2/pynitrokey/cli/nethsm.py 1970-01-01
01:00:00.000000000 +0100
@@ -1356,6 +1356,14 @@
)
@click.option("--common-name", default="", prompt=True, help="The common name")
@click.option("--email-address", default="", prompt=True, help="The email
address")
[email protected](
+ "--san",
+ multiple=True,
+ help="The Subject Alternative Name(s) (default: same as common name)",
+)
[email protected](
+ "--no-san", is_flag=True, help="Omit the Subject Alternative Name
extension"
+)
@click.pass_context
def csr(
ctx: Context,
@@ -1368,6 +1376,8 @@
organizational_unit: str,
common_name: str,
email_address: str,
+ san: tuple[str],
+ no_san: bool,
) -> None:
"""Generate a certificate signing request.
@@ -1375,8 +1385,25 @@
example to replace the self-signed initial certificate. If the --key-id
option is set, the CSR is generated for a key stored on the NetHSM.
+ By default, the certificate contains a Subject Alternative Name (SAN)
+ extension with the common name. If the --no-san option is set, the
+ extension is omitted. If the --san option is set one or more times, the
+ passed values are used instead of the common name.
+
This command requires authentication as a user with the Administrator
role."""
+
+ subject_alt_names = None
+ if len(san) > 0:
+ if no_san:
+ raise CliException(
+ "The --san and --no-san options cannot bet used at the same
time.",
+ support_hint=False,
+ )
+ subject_alt_names = list(san)
+ if no_san:
+ subject_alt_names = []
+
api, key_id = get_api_or_key_id(api, key_id)
with connect(ctx) as nethsm:
if key_id:
@@ -1389,6 +1416,7 @@
organizational_unit=organizational_unit,
common_name=common_name,
email_address=email_address,
+ subject_alt_names=subject_alt_names,
)
else:
csr = nethsm.csr(
@@ -1399,6 +1427,7 @@
organizational_unit=organizational_unit,
common_name=common_name,
email_address=email_address,
+ subject_alt_names=subject_alt_names,
)
print(csr)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/pynitrokey-0.12.1/pyproject.toml
new/pynitrokey-0.12.2/pyproject.toml
--- old/pynitrokey-0.12.1/pyproject.toml 1970-01-01 01:00:00.000000000
+0100
+++ new/pynitrokey-0.12.2/pyproject.toml 1970-01-01 01:00:00.000000000
+0100
@@ -8,7 +8,7 @@
[project]
name = "pynitrokey"
-version = "0.12.1"
+version = "0.12.2"
description = "Python client for Nitrokey devices"
license = { text = "Apache-2.0 OR MIT" }
authors = [
@@ -29,7 +29,7 @@
"hidapi ==0.14.0.post2 ; sys_platform == 'linux'",
"intelhex >=2.3, <3",
"libusb1 >=3, <4",
- "nethsm >=2.1, <3",
+ "nethsm >=2.1.1, <3",
"nitrokey >=0.4.2, <0.5",
"nkdfu >=0.2, <0.3",
"pyusb >=1.2, <2",