---
- branch: MAIN
  date: Tue May  9 16:49:07 UTC 2017
  files:
  - new: '1.41'
    old: '1.40'
    path: pkgsrc/security/py-OpenSSL/Makefile
    pathrev: pkgsrc/security/py-OpenSSL/Makefile@1.41
    type: modified
  - new: '1.14'
    old: '1.13'
    path: pkgsrc/security/py-OpenSSL/distinfo
    pathrev: pkgsrc/security/py-OpenSSL/distinfo@1.14
    type: modified
  - new: '1.2'
    old: '1.1'
    path: pkgsrc/security/py-OpenSSL/patches/patch-tests_memdbg.py
    pathrev: pkgsrc/security/py-OpenSSL/patches/patch-tests_memdbg.py@1.2
    type: modified
  id: 20170509T164907Z.6ca3977ff9c7540fa75c4fcaa18ae3a24ee8ce79
  log: |
    Changes 17.0.0:
    - Added ``OpenSSL.X509Store.set_time()`` to set a custom verification time when verifying certificate chains.
    - Added a collection of functions for working with OCSP stapling.
      None of these functions make it possible to validate OCSP assertions, only to staple them into the handshake and to retrieve the stapled assertion if provided.
      Users will need to write their own code to handle OCSP assertions.
      We specifically added: ``Context.set_ocsp_server_callback``, ``Context.set_ocsp_client_callback``, and ``Connection.request_ocsp``.
    - Changed the ``SSL`` module's memory allocation policy to avoid zeroing memory it allocates when unnecessary.
      This reduces CPU usage and memory allocation time by an amount proportional to the size of the allocation.
      For applications that process a lot of TLS data or that use very lage allocations this can provide considerable performance improvements.
    - Automatically set ``SSL_CTX_set_ecdh_auto()`` on ``OpenSSL.SSL.Context``.
    - Fix empty exceptions from ``OpenSSL.crypto.load_privatekey()``.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/py-OpenSSL'
  unixtime: '1494348547'
  user: adam