Hello community,
here is the log from the commit of package python3-cryptography for
openSUSE:Factory checked in at 2016-09-28 15:03:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python3-cryptography (Old)
and /work/SRC/openSUSE:Factory/.python3-cryptography.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python3-cryptography"
Changes:
--------
---
/work/SRC/openSUSE:Factory/python3-cryptography/python3-cryptography.changes
2016-09-08 17:37:49.000000000 +0200
+++
/work/SRC/openSUSE:Factory/.python3-cryptography.new/python3-cryptography.changes
2016-09-28 15:03:09.000000000 +0200
@@ -1,0 +2,12 @@
+Sun Sep 25 16:01:50 UTC 2016 - [email protected]
+
+- update to version 1.5.1:
+ * Updated Windows and OS X wheels to be compiled against OpenSSL
+ 1.0.2i.
+ * Resolved a UserWarning when used with cffi 1.8.3.
+ * Fixed a memory leak in name creation with X.509.
+ * Added a workaround for old versions of setuptools.
+ * Fixed an issue preventing cryptography from compiling against
+ OpenSSL 1.0.2i.
+
+-------------------------------------------------------------------
Old:
----
cryptography-1.5.tar.gz
cryptography-1.5.tar.gz.asc
New:
----
cryptography-1.5.1.tar.gz
cryptography-1.5.1.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python3-cryptography.spec ++++++
--- /var/tmp/diff_new_pack.zIDmQj/_old 2016-09-28 15:03:10.000000000 +0200
+++ /var/tmp/diff_new_pack.zIDmQj/_new 2016-09-28 15:03:10.000000000 +0200
@@ -17,7 +17,7 @@
Name: python3-cryptography
-Version: 1.5
+Version: 1.5.1
Release: 0
Url: https://cryptography.io/en/latest/
Summary: Python library which exposes cryptographic recipes and
primitives
++++++ cryptography-1.5.tar.gz -> cryptography-1.5.1.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/cryptography-1.5/CHANGELOG.rst
new/cryptography-1.5.1/CHANGELOG.rst
--- old/cryptography-1.5/CHANGELOG.rst 2016-08-26 17:02:19.000000000 +0200
+++ new/cryptography-1.5.1/CHANGELOG.rst 2016-09-22 22:08:20.000000000
+0200
@@ -1,6 +1,17 @@
Changelog
=========
+1.5.1 - 2016-09-22
+~~~~~~~~~~~~~~~~~~
+
+* Updated Windows and OS X wheels to be compiled against OpenSSL 1.0.2i.
+* Resolved a ``UserWarning`` when used with cffi 1.8.3.
+* Fixed a memory leak in name creation with X.509.
+* Added a workaround for old versions of setuptools.
+* Fixed an issue preventing ``cryptography`` from compiling against
+ OpenSSL 1.0.2i.
+
+
1.5 - 2016-08-26
~~~~~~~~~~~~~~~~
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/cryptography-1.5/PKG-INFO
new/cryptography-1.5.1/PKG-INFO
--- old/cryptography-1.5/PKG-INFO 2016-08-26 17:13:20.000000000 +0200
+++ new/cryptography-1.5.1/PKG-INFO 2016-09-22 22:08:40.000000000 +0200
@@ -1,6 +1,6 @@
Metadata-Version: 1.1
Name: cryptography
-Version: 1.5
+Version: 1.5.1
Summary: cryptography is a package which provides cryptographic recipes and
primitives to Python developers.
Home-page: https://github.com/pyca/cryptography
Author: The cryptography developers
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/_cffi_src/openssl/cryptography.py
new/cryptography-1.5.1/src/_cffi_src/openssl/cryptography.py
--- old/cryptography-1.5/src/_cffi_src/openssl/cryptography.py 2016-08-26
16:49:15.000000000 +0200
+++ new/cryptography-1.5.1/src/_cffi_src/openssl/cryptography.py
2016-09-22 22:08:15.000000000 +0200
@@ -32,6 +32,8 @@
(OPENSSL_VERSION_NUMBER < 0x10002000)
#define CRYPTOGRAPHY_OPENSSL_LESS_THAN_102BETA3 \
(OPENSSL_VERSION_NUMBER < 0x10002003)
+#define CRYPTOGRAPHY_OPENSSL_LESS_THAN_102I \
+ (OPENSSL_VERSION_NUMBER < 0x1000209fL)
#define CRYPTOGRAPHY_OPENSSL_LESS_THAN_110 \
(OPENSSL_VERSION_NUMBER < 0x10100000)
#define CRYPTOGRAPHY_OPENSSL_LESS_THAN_110PRE5 \
@@ -51,6 +53,8 @@
static const int CRYPTOGRAPHY_OPENSSL_LESS_THAN_101;
+static const int CRYPTOGRAPHY_OPENSSL_LESS_THAN_102I;
+
static const int CRYPTOGRAPHY_IS_LIBRESSL;
"""
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/cryptography-1.5/src/_cffi_src/openssl/ssl.py
new/cryptography-1.5.1/src/_cffi_src/openssl/ssl.py
--- old/cryptography-1.5/src/_cffi_src/openssl/ssl.py 2016-08-26
15:40:54.000000000 +0200
+++ new/cryptography-1.5.1/src/_cffi_src/openssl/ssl.py 2016-09-22
22:08:15.000000000 +0200
@@ -664,7 +664,10 @@
#endif
-#if defined(OPENSSL_NO_COMP) || defined(LIBRESSL_VERSION_NUMBER)
+/* In OpenSSL 1.0.2i+ the handling of COMP_METHOD when OPENSSL_NO_COMP was
+ changed and we no longer need to typedef void */
+#if (defined(OPENSSL_NO_COMP) && CRYPTOGRAPHY_OPENSSL_LESS_THAN_102I) || \
+ defined(LIBRESSL_VERSION_NUMBER)
static const long Cryptography_HAS_COMPRESSION = 0;
typedef void COMP_METHOD;
#else
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/cryptography-1.5/src/cryptography/__about__.py
new/cryptography-1.5.1/src/cryptography/__about__.py
--- old/cryptography-1.5/src/cryptography/__about__.py 2016-08-26
17:02:19.000000000 +0200
+++ new/cryptography-1.5.1/src/cryptography/__about__.py 2016-09-22
22:08:20.000000000 +0200
@@ -14,7 +14,7 @@
" and primitives to Python developers.")
__uri__ = "https://github.com/pyca/cryptography"
-__version__ = "1.5"
+__version__ = "1.5.1"
__author__ = "The cryptography developers"
__email__ = "[email protected]"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/cryptography/hazmat/backends/__init__.py
new/cryptography-1.5.1/src/cryptography/hazmat/backends/__init__.py
--- old/cryptography-1.5/src/cryptography/hazmat/backends/__init__.py
2016-08-26 15:40:54.000000000 +0200
+++ new/cryptography-1.5.1/src/cryptography/hazmat/backends/__init__.py
2016-09-22 22:08:15.000000000 +0200
@@ -17,7 +17,13 @@
if _available_backends_list is None:
_available_backends_list = [
- ep.resolve()
+ # DeprecatedIn16
+ # setuptools 11.3 deprecated support for the require parameter to
+ # load(), and introduced the new resolve() method instead.
+ # We previously removed this fallback, but users are having issues
+ # where Python loads an older setuptools due to various syspath
+ # weirdness.
+ ep.resolve() if hasattr(ep, "resolve") else ep.load(require=False)
for ep in pkg_resources.iter_entry_points(
"cryptography.backends"
)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/cryptography/hazmat/backends/commoncrypto/backend.py
new/cryptography-1.5.1/src/cryptography/hazmat/backends/commoncrypto/backend.py
---
old/cryptography-1.5/src/cryptography/hazmat/backends/commoncrypto/backend.py
2016-08-26 15:40:54.000000000 +0200
+++
new/cryptography-1.5.1/src/cryptography/hazmat/backends/commoncrypto/backend.py
2016-09-22 22:08:15.000000000 +0200
@@ -133,7 +133,7 @@
def derive_pbkdf2_hmac(self, algorithm, length, salt, iterations,
key_material):
alg_enum = self._supported_pbkdf2_hmac_algorithms[algorithm.name]
- buf = self._ffi.new("char[]", length)
+ buf = self._ffi.new("uint8_t[]", length)
res = self._lib.CCKeyDerivationPBKDF(
self._lib.kCCPBKDF2,
key_material,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/backend.py
new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/backend.py
--- old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/backend.py
2016-08-26 16:49:15.000000000 +0200
+++ new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/backend.py
2016-09-22 22:08:20.000000000 +0200
@@ -292,7 +292,7 @@
def derive_pbkdf2_hmac(self, algorithm, length, salt, iterations,
key_material):
- buf = self._ffi.new("char[]", length)
+ buf = self._ffi.new("unsigned char[]", length)
evp_md = self._lib.EVP_get_digestbyname(
algorithm.name.encode("ascii"))
self.openssl_assert(evp_md != self._ffi.NULL)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/ciphers.py
new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/ciphers.py
--- old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/ciphers.py
2016-08-26 15:40:54.000000000 +0200
+++ new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/ciphers.py
2016-09-22 22:08:20.000000000 +0200
@@ -185,8 +185,8 @@
cipher.key, len(cipher.key) * 8, self._key
)
self._backend.openssl_assert(res == 0)
- self._ecount = self._backend._ffi.new("char[]", 16)
- self._nonce = self._backend._ffi.new("char[16]", mode.nonce)
+ self._ecount = self._backend._ffi.new("unsigned char[]", 16)
+ self._nonce = self._backend._ffi.new("unsigned char[16]", mode.nonce)
self._num = self._backend._ffi.new("unsigned int *", 0)
def update(self, data):
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/ec.py
new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/ec.py
--- old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/ec.py
2016-08-26 15:40:54.000000000 +0200
+++ new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/ec.py
2016-09-22 22:08:15.000000000 +0200
@@ -102,7 +102,7 @@
max_size = self._backend._lib.ECDSA_size(ec_key)
self._backend.openssl_assert(max_size > 0)
- sigbuf = self._backend._ffi.new("char[]", max_size)
+ sigbuf = self._backend._ffi.new("unsigned char[]", max_size)
siglen_ptr = self._backend._ffi.new("unsigned int[]", 1)
res = self._backend._lib.ECDSA_sign(
0,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/encode_asn1.py
new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/encode_asn1.py
---
old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/encode_asn1.py
2016-08-26 15:40:54.000000000 +0200
+++
new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/encode_asn1.py
2016-09-22 22:08:15.000000000 +0200
@@ -85,6 +85,10 @@
subject = backend._lib.X509_NAME_new()
for attribute in attributes:
name_entry = _encode_name_entry(backend, attribute)
+ # X509_NAME_add_entry dups the object so we need to gc this copy
+ name_entry = backend._ffi.gc(
+ name_entry, backend._lib.X509_NAME_ENTRY_free
+ )
res = backend._lib.X509_NAME_add_entry(subject, name_entry, -1, 0)
backend.openssl_assert(res == 1)
return subject
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/rsa.py
new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/rsa.py
--- old/cryptography-1.5/src/cryptography/hazmat/backends/openssl/rsa.py
2016-08-26 15:40:54.000000000 +0200
+++ new/cryptography-1.5.1/src/cryptography/hazmat/backends/openssl/rsa.py
2016-09-22 22:08:15.000000000 +0200
@@ -103,7 +103,7 @@
backend.openssl_assert(res > 0)
outlen = backend._ffi.new("size_t *", buf_size)
- buf = backend._ffi.new("char[]", buf_size)
+ buf = backend._ffi.new("unsigned char[]", buf_size)
res = crypt(pkey_ctx, buf, outlen, data, len(data))
if res <= 0:
_handle_rsa_enc_dec_error(backend, key)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/cryptography-1.5/src/cryptography.egg-info/PKG-INFO
new/cryptography-1.5.1/src/cryptography.egg-info/PKG-INFO
--- old/cryptography-1.5/src/cryptography.egg-info/PKG-INFO 2016-08-26
17:13:20.000000000 +0200
+++ new/cryptography-1.5.1/src/cryptography.egg-info/PKG-INFO 2016-09-22
22:08:40.000000000 +0200
@@ -1,6 +1,6 @@
Metadata-Version: 1.1
Name: cryptography
-Version: 1.5
+Version: 1.5.1
Summary: cryptography is a package which provides cryptographic recipes and
primitives to Python developers.
Home-page: https://github.com/pyca/cryptography
Author: The cryptography developers
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/cryptography-1.5/tests/hazmat/backends/test_openssl.py
new/cryptography-1.5.1/tests/hazmat/backends/test_openssl.py
--- old/cryptography-1.5/tests/hazmat/backends/test_openssl.py 2016-08-26
16:49:15.000000000 +0200
+++ new/cryptography-1.5.1/tests/hazmat/backends/test_openssl.py
2016-09-22 22:08:15.000000000 +0200
@@ -182,7 +182,7 @@
assert size == length
return sample_data
monkeypatch.setattr(os, "urandom", notrandom)
- buf = backend._ffi.new("char[]", length)
+ buf = backend._ffi.new("unsigned char[]", length)
backend._lib.RAND_bytes(buf, length)
assert backend._ffi.buffer(buf)[0:length] == sample_data
@@ -247,7 +247,7 @@
def test_osrandom_sanity_check(self):
# This test serves as a check against catastrophic failure.
- buf = backend._ffi.new("char[]", 500)
+ buf = backend._ffi.new("unsigned char[]", 500)
res = backend._lib.RAND_bytes(buf, 500)
assert res == 1
assert backend._ffi.buffer(buf)[:] != "\x00" * 500
@@ -729,7 +729,7 @@
backend
)
if (
- not backend._lib.CRYPTOGRAPHY_OPENSSL_110_OR_GREATER or
+ backend._lib.CRYPTOGRAPHY_OPENSSL_LESS_THAN_102I or
backend._lib.CRYPTOGRAPHY_IS_LIBRESSL
):
with pytest.raises(ValueError) as exc: