2017-07-27 20:39:27 by Adam Ciarcinski | Files touched by this commit (4) |
Log message:
2.0.2:
Marked all symbols as hidden in the manylinux1 wheel to avoid a bug with symbol \
resolution in certain scenarios.
2.0.1:
Fixed a compilation bug affecting OpenBSD.
Altered the manylinux1 wheels to statically link OpenSSL instead of dynamically \
linking and bundling the shared object. This should resolve crashes seen when \
using uwsgi or other binaries that link against OpenSSL independently.
Fixed the stack level for the signer and verifier warnings.
|
2017-07-18 15:58:25 by Adam Ciarcinski | Files touched by this commit (3) |
Log message:
2.0:
BACKWARDS INCOMPATIBLE: Support for Python 3.3 has been dropped.
We now ship manylinux1 wheels linked against OpenSSL 1.1.0f. These wheels will \
be automatically used with most Linux distributions if you are running the \
latest pip.
Deprecated the use of signer on \
:class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey`, \
:class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPrivateKey`, and \
:class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey` \
in favor of sign.
Deprecated the use of verifier on \
:class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey`, \
:class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey`, and \
:class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey` in \
favor of verify.
Added support for parsing \
:class:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp` \
objects from X.509 certificate extensions.
Added support for \
:class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20Poly1305`.
Added support for :class:`~cryptography.hazmat.primitives.ciphers.aead.AESCCM`.
Added :class:`~cryptography.hazmat.primitives.ciphers.aead.AESGCM`, a "one \
shot" API for AES GCM encryption.
Added support for :doc:`/hazmat/primitives/asymmetric/x25519`.
Added support for serializing and deserializing Diffie-Hellman parameters with \
:func:`~cryptography.hazmat.primitives.serialization.load_pem_parameters`, \
:func:`~cryptography.hazmat.primitives.serialization.load_der_parameters`, and \
:meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHParameters.parameter_bytes` \
.
The extensions attribute on :class:`~cryptography.x509.Certificate`, \
:class:`~cryptography.x509.CertificateSigningRequest`, \
:class:`~cryptography.x509.CertificateRevocationList`, and \
:class:`~cryptography.x509.RevokedCertificate` now caches the computed \
Extensions object. There should be no performance change, just a performance \
improvement for programs accessing the extensions attribute multiple times.
|
2017-06-21 19:42:00 by Adam Ciarcinski | Files touched by this commit (1) |
Log message:
PLIST.Darwin is not needed any more
|
2017-06-19 23:03:19 by Thomas Klausner | Files touched by this commit (3) |
Log message:
Updated py-cryptography to 1.9.
1.9 - 2017-05-29
~~~~~~~~~~~~~~~~
* **BACKWARDS INCOMPATIBLE:** Elliptic Curve signature verification no longer
returns ``True`` on success. This brings it in line with the interface's
documentation, and our intent. The correct way to use
:meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.verify`
has always been to check whether or not
:class:`~cryptography.exceptions.InvalidSignature` was raised.
* **BACKWARDS INCOMPATIBLE:** Dropped support for macOS 10.7 and 10.8.
* **BACKWARDS INCOMPATIBLE:** The minimum supported PyPy version is now 5.3.
* Python 3.3 support has been deprecated, and will be removed in the next
``cryptography`` release.
* Add support for providing ``tag`` during
:class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` finalization via
\
:meth:`~cryptography.hazmat.primitives.ciphers.AEADDecryptionContext.finalize_wi \
th_tag`.
* Fixed an issue preventing ``cryptography`` from compiling against
LibreSSL 2.5.x.
* Added
\
:meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.key_ \
size`
and
\
:meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.key \
_size`
as convenience methods for determining the bit size of a secret scalar for
the curve.
* Accessing an unrecognized extension marked critical on an X.509 object will
no longer raise an ``UnsupportedExtension`` exception, instead an
:class:`~cryptography.x509.UnrecognizedExtension` object will be returned.
This behavior was based on a poor reading of the RFC, unknown critical
extensions only need to be rejected on certificate verification.
* The CommonCrypto backend has been removed.
* MultiBackend has been removed.
* ``Whirlpool`` and ``RIPEMD160`` have been deprecated.
|
2017-05-29 15:22:31 by Thomas Klausner | Files touched by this commit (1) |
Log message:
Comment out py-requests test dependency to fix cyclic dependency
with py-requests-2.16.x.
|
2017-05-29 14:07:01 by Thomas Klausner | Files touched by this commit (2) |
Log message:
Updated py-cryptography to 1.8.2.
1.8.2 - 2017-05-26
~~~~~~~~~~~~~~~~~~
* Fixed a compilation bug affecting OpenSSL 1.1.0f.
* Updated Windows and macOS wheels to be compiled against OpenSSL 1.1.0f.
|
2017-03-21 17:04:59 by Thomas Klausner | Files touched by this commit (1) |
Log message:
Remove comment -- test failures not repeatable.
|
2017-03-13 10:42:25 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
Updated py-cryptography to 1.8.1.
1.8.1 - 2017-03-10
~~~~~~~~~~~~~~~~~~
* Fixed macOS wheels to properly link against 1.1.0 rather than 1.0.2.
1.8 - 2017-03-09
~~~~~~~~~~~~~~~~
* Added support for Python 3.6.
* Windows and macOS wheels now link against OpenSSL 1.1.0.
* macOS wheels are no longer universal. This change significantly shrinks the
size of the wheels. Users on macOS 32-bit Python (if there are any) should
migrate to 64-bit or build their own packages.
* Changed ASN.1 dependency from ``pyasn1`` to ``asn1crypto`` resulting in a
general performance increase when encoding/decoding ASN.1 structures. Also,
the ``pyasn1_modules`` test dependency is no longer required.
* Added support for
:meth:`~cryptography.hazmat.primitives.ciphers.CipherContext.update_into` on
:class:`~cryptography.hazmat.primitives.ciphers.CipherContext`.
* Added
\
:meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKeyWithSerializati \
on.private_bytes`
to
\
:class:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKeyWithSerializat \
ion`.
* Added
\
:meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPublicKeyWithSerializatio \
n.public_bytes`
to
\
:class:`~cryptography.hazmat.primitives.asymmetric.dh.DHPublicKeyWithSerializati \
on`.
* :func:`~cryptography.hazmat.primitives.serialization.load_pem_private_key`
and
:func:`~cryptography.hazmat.primitives.serialization.load_der_private_key`
now require that ``password`` must be bytes if provided. Previously this
was documented but not enforced.
* Added support for subgroup order in :doc:`/hazmat/primitives/asymmetric/dh`.
|
2017-02-13 18:49:46 by Adam Ciarcinski | Files touched by this commit (1) |
Log message:
Fix PLIST.Darwin
|
2017-01-28 12:15:07 by Thomas Klausner | Files touched by this commit (3) |
Log message:
Fix test segfault by using upstream patch #3350:
https://github.com/pyca/cryptography/pull/3350
Bump PKGREVISION.
Identified by @reaperhulk in https://github.com/pyca/cryptography/issues/3372
|