for development of the tenth release shortly.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
in the CertificateBuilder.
...and numerous other small improvements!
This release is the result of 670 commits from 213 different pull requests.
These pull requests were created by 23 different contributors.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
_for_class().
* CertificatePolicies are now supported in the CertificateBuilder.
* countryName is now encoded as a PrintableString when creating subject and
issuer distinguished names with the Certificate and CSR builder classes.
...and other small improvements as always.
-Paul Kehrer (reaperhulk)
rs who helped on this release, especially around
infrastructure to support the new wheels.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
, and PyPy.
Changelog:
* Fixed a SIGBUS crash with the OS X wheels caused by redefinition of a method.
* Fixed a runtime error "undefined symbol EC_GFp_nistp224_method" that occurred
with some OpenSSL installations.
* Updated Windows and OS X wheels to be compiled against OpenSSL 1
recognized non-critical X.509 extensions are now parsed into an
UnrecognizedExtension object.
...and various other improvements. Please see the website changelog for
documentation and additional details.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-ann
://cryptography.io/en/latest/changelog/).
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
ernalError on import.
Thanks to the users who donated their time in tracking down and resolving these
issues.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
t; sign() and verify() APIs to RSA keys.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
ed two new OpenSSL functions to the bindings to support an upcoming
pyOpenSSL release.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
ror is now correctly raised in all cases.
* Added from_issuer_subject_key_identifier().
...and the typical miscellaneous improvements. Please see the website changelog
for documentation and additional details.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-ann
PyCA/cryptography 1.3.1 was just released to PyPI. This is a minor bugfix
release that fixes the following:
* Fixed a bug that caused an AttributeError when using mock to patch some
cryptography modules.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce
he version of OpenSSL shipping in the Windows and
macOS wheels to 1.0.2k. There are no other changes.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
SSL
1.0.2i.
With version 1.5.1 we are still linking 1.0.2 for the Mac and Windows
wheels, but in the 1.6 release we will switch to linking 1.1.0. Thanks to
all the contributors for their help on this release!
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
n target.
As of 1.5 we are still linking 1.0.2h for the Mac and Windows wheels, but
in the 1.6 release we will switch to linking 1.1.0. Thanks to all the
contributors for their help on this release!
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
ed Windows and OS X wheels to be compiled against OpenSSL 1.0.2j.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
RITY ISSUE: Fixed a bug where HKDF would return an empty byte-string if
used with a length less than algorithm.digest_size. Credit to Markus Döring
for reporting the issue.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software
PyCA cryptography 1.7.1 has been released to PyPI. This is a small bug fix
release.
Changelog:
* Fixed a regression in int_from_bytes where it failed to accept bytearray.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python
ded Python and other edge cases. More information
about this change can be found in the pull request.
Thanks to everyone who helped with this release! The upcoming cryptography
1.8 will (among other features) switch our static wheels to link against
OpenSSL 1.1.0.
-Paul Kehrer (reaperhulk)
ed support for subgroup order in Diffie-Hellman key exchange.
Thanks to all the contributors on this release!
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
and verifier warnings.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
, CertificateSigningRequest,
CertificateRevocationList, and RevokedCertificate now caches the computed
Extensions object. There should be no performance change, just a
performance improvement for programs accessing the extensions attribute
multiple times.
Thanks to all the contributors!
-Paul Kehrer
fixes an issue with weak linking symbols when compiling on
macOS versions older than 10.12. There are no other changes.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf
PyCA cryptography 1.8.2 has been released to PyPI. This is a small bug fix
release to correct an issue with compilation on OpenSSL 1.1.0f.
Changelog:
* Fixed a compilation bug affecting OpenSSL 1.1.0f.
* Updated Windows and macOS wheels to be compiled against OpenSSL 1.1.0f.
-Paul Kehrer
and RIPEMD160 have been deprecated.
Thanks to all the contributors for their hard work on this release!
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
, in addition to the changes from 2.1, contains the following:
* Fixed support for install with the system pip on Ubuntu 16.04.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf
X509_up_ref for an upcoming pyOpenSSL release.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL
1.1.0g.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
X509_up_ref for an upcoming pyOpenSSL release.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
:
* This release corrects a bug with the manylinux1 wheels where OpenSSL's
stack was marked executable.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
://cryptography.io/en/latest/changelog/#v2-3-1):
* Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL
1.1.0i.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http
() and aes_key_unwrap_with_padding() now raise
InvalidUnwrap if the wrapped key is an invalid length, instead of
ValueError.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
loading DSA keys with 224 bit q.
Thanks to everyone who contributed!
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
dulo 8 was zero.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
. OpenSSL 1.0.1 is no longer supported by
the OpenSSL project. At this time there is no time table for dropping
support, however we strongly encourage all users to upgrade or install
cryptography from a wheel.
* Added initial OCSP support.
* Added support for PrecertPoison.
-Paul Kehrer (reaperhulk
().
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software Foundation:
http://www.python.org/psf/donations/
, Python 3.4+, and PyPy.
Changelog (https://cryptography.io/en/latest/changelog/#v2-4-2):
* Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL
1.1.0j.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software
, Python 3.4+, and PyPy.
Changelog (https://cryptography.io/en/latest/changelog/#v2-6-1):
* Resolved an error in our build infrastructure that broke our Python3
wheels for macOS and Linux.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support
to
from_issuer_subject_key_identifier() and deprecate passing an Extension
object. The documentation always required SubjectKeyIdentifier but the
implementation previously required an Extension.
-Paul Kehrer (reaperhulk)
--
https://mail.python.org/mailman/listinfo/python-announce-list
Support the Python Software
and
OCSPResponseBuilder.
* cryptography no longer depends on asn1crypto.
* FreshestCRL is now allowed as a CertificateRevocationList extension.
-Paul Kehrer (reaperhulk)
--
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le
the RDNs as required by RFC 4514.
* Updated Windows, macOS, and manylinux wheels to be compiled with
OpenSSL 1.1.1f.
* Added support for parsing single_extensions in an OCSP response.
* NameAttribute values can now be empty strings.
-Paul Kehrer (reaperhulk)
--
Python-announce-list mailing list
raises an OverflowError. This also resolves the same issue
in Fernet (symmetric encryption).
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le
, Python 3.5+, and PyPy.
Changelog (https://cryptography.io/en/latest/changelog/#v3-1-1):
* Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL
1.1.1h.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list
, Python 3.5+, and PyPy.
Changelog (https://cryptography.io/en/latest/changelog.html#v3-2-1):
* Disable blinding on RSA public keys to address an error with some
versions of OpenSSL.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python
support for PKCS7 signing (including SMIME) via
PKCS7SignatureBuilder.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le...@python.org
https
support for creating PKCS12 files with
serialize_key_and_certificates().
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le...@python.org
https
is deprecated in cryptography. This is the last release
that will support Python 2.
* Added the recover_data_from_signature() function to RSAPublicKey for
recovering the signed data from an RSA signature.
-Paul Kehrer (reaperhulk)
___
Python-announce-list
, Python 3.6+, and PyPy.
Please note that this is the final version that will support Python 2.7!
Changelog (https://cryptography.io/en/latest/changelog/):
* Re-added a legacy symbol causing problems for older ``pyOpenSSL`` users.
-Paul Kehrer (reaperhulk
use an officially produced wheel will not need to make any changes.
The minimum supported Rust version is 1.45.0.
* cryptography now has PEP 484 type hints on nearly all of of its
public APIs. Users can begin using them to type check their code with
mypy.
-Paul Kehrer (reaperh
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-1):
* Fixed a circular import issue.
* Added additional debug output to assist users seeing installation
errors due to outdated pip or missing rustc.
-Paul Kehrer (reaperhulk
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-7):
* Updated Windows, macOS, and manylinux wheels to be compiled with
OpenSSL 1.1.1k.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-6):
* Updated Windows, macOS, and manylinux wheels to be compiled with
OpenSSL 1.1.1j.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list
phy will be switching to a new versioning scheme with its
next feature release. More information is available in our API
stability documentation.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe s
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-8):
* Updated Windows, macOS, and manylinux wheels to be compiled with
OpenSSL 1.1.1l.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list
. Users on distributions
like Alpine Linux should ensure they upgrade to the latest pip to
correctly receive wheels.
* Added rfc4514_attribute_name attribute to x509.NameAttribute.
* Added KBKDFCMAC.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing
n an ASN.1 OCTET STRING. This conforms to RFC 6960 but
conflicts with the original behavior specified in RFC 2560. For a
temporary period for backwards compatibility, we will also parse
values that are encoded as specified in RFC 2560 but this behavior
will be removed in a future release.
-P
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v36-0-1):
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1m.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v36-0-2):
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1n.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
+, and PyPy3 7.3.10+.
Changelog (https://cryptography.io/en/latest/changelog/#v41-0-5):
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.4.
* Added a function to support an upcoming pyOpenSSL release.
-Paul Kehrer (reaperhulk
types with
load_pem_private_key() and load_der_private_key(). This functionality
is limited to OpenSSL 1.1.1e+ and loads the key as a normal RSA
private key, discarding the PSS constraint information.
-Paul Kehrer (reaperhulk)
___
Python-announce-list
users. These will
be removed again in the future, so pyOpenSSL users should still
upgrade to the latest version of that package when they upgrade
cryptography.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list
manylinux2010
wheels. Going forward the minimum supported manylinux ABI for our
wheels will be manylinux2014. The vast majority of users will continue
to receive manylinux wheels provided they have an up to date pip.
-Paul Kehrer (reaperhulk)
___
Python-announce-list
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v37-0-2):
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.3.
* Added a constant needed for an upcoming pyOpenSSL release.
-Paul Kehrer (reaperhulk)
___
Python
not replace AES
(which allows all AES key lengths), but are intended for applications
where developers want to be explicit about key length.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v38-0-1):
* Fixed parsing TLVs in ASN.1 with length greater than 65535 bytes (typically
seen in large CRLs).
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v38-0-2):
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.6.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v38-0-3):
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL
3.0.7, which resolves CVE-2022-3602 and CVE-2022-3786.
-Paul Kehrer (reaperhulk)
___
Python-announce-list
ing encrypt or decrypt with the same key.
* Added support for creating OCSP requests with precomputed hashes
using add_certificate_by_hash().
* Added support for loading multiple PEM-encoded X.509 certificates
from a single input via load_pem_x509_certificates().
-Paul Kehrer (reaperh
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v38-0-4):
* Fixed compilation when using LibreSSL 3.6.0.
* Fixed error when using py2app to build an application with a
cryptography dependency.
-Paul Kehrer (reaperhulk)
___
Python
, SSHCertPrivateKeyTypes
PKCS12: PKCS12PrivateKeyTypes
PKCS7: PKCS7HashTypes, PKCS7PrivateKeyTypes
Two-factor: HOTPHashTypes
* Deprecated previously undocumented but not private type aliases in
the cryptography.hazmat.primitives.asymmetric.types module in favor of
new ones above.
-Paul Kehrer (reaperhulk
+, and PyPy3 7.3.10+.
Changelog (https://cryptography.io/en/latest/changelog/#v40-0-1):
* Fixed a bug where certain operations would fail if an object
happened to be in the top-half of the memory-space. This only impacted
32-bit systems.
-Paul Kehrer (reaperhulk
+, and PyPy3.
Changelog (https://cryptography.io/en/latest/changelog/#v39-0-2)
* Fixed a bug where the content type header was not properly encoded
for PKCS7 signatures when using the ``Text`` option and ``SMIME``
encoding.
-Paul Kehrer (reaperhulk
+, and PyPy3 7.3.10+.
Changelog (https://cryptography.io/en/latest/changelog/#v40-0-2):
* Fixed compilation when using LibreSSL 3.7.2.
* Added some functions to support an upcoming pyOpenSSL release.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing
.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le...@python.org
https://mail.python.org/mailman3/lists/python-announce-list.python.org/
Member address
generated invalid forms with a warning. In the next
release, support for parsing these invalid forms will be removed.
-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python
+, and PyPy3 7.3.10+.
Changelog (https://cryptography.io/en/latest/changelog/#v41-0-1):
* Temporarily allow invalid ECDSA signature algorithm parameters in
X.509 certificates, which are generated by older versions of Java.
* Allow null bytes in pass phrases when serializing private keys.
-Paul Kehrer
ers (including PSS) via signature_algorithm_parameters().
* Support signing PSS X.509 certificates via the new keyword-only
argument rsa_padding on sign().
* Added support for ChaCha20Poly1305 on BoringSSL.
-Paul Kehrer (reaperhulk)
___
Python-announce-l
+, and PyPy3 7.3.10+.
Changelog (https://cryptography.io/en/latest/changelog/#v41-0-3):
* Fixed performance regression loading DH public keys.
* Fixed a memory leak when using ChaCha20Poly1305.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.2.
-Paul Kehrer (reaperhulk
+, and PyPy3 7.3.10+.
Changelog (https://cryptography.io/en/latest/changelog/#v41-0-6):
* Fixed a null-pointer-dereference and segfault that could occur when
loading certificates from a PKCS#7 bundle. Credit to pkuzco for
reporting the issue. CVE-2023-49083
-Paul Kehrer (reaperhulk
79 matches
Mail list logo
