Thu Oct 26 06:32:57 2023 UTC ()
py-OpenSSL: updated to 23.3.0

23.3.0 (2023-10-25)
-------------------

Backward-incompatible changes:

- Dropped support for Python 3.6.
- The minimum ``cryptography`` version is now 41.0.5.
- Removed ``OpenSSL.crypto.loads_pkcs7`` and ``OpenSSL.crypto.loads_pkcs12`` which had been deprecated for 3 years.
- Added ``OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT`` to allow legacy insecure renegotiation between OpenSSL and unpatched servers.

Deprecations:

- Deprecated ``OpenSSL.crypto.PKCS12`` (which was intended to have been deprecated at the same time as ``OpenSSL.crypto.load_pkcs12``).
- Deprecated ``OpenSSL.crypto.NetscapeSPKI``.
- Deprecated ``OpenSSL.crypto.CRL``
- Deprecated ``OpenSSL.crypto.Revoked``
- Deprecated ``OpenSSL.crypto.load_crl`` and ``OpenSSL.crypto.dump_crl``
- Deprecated ``OpenSSL.crypto.sign`` and ``OpenSSL.crypto.verify``
- Deprecated ``OpenSSL.crypto.X509Extension``

Changes:

- Changed ``OpenSSL.crypto.X509Store.add_crl`` to also accept
  ``cryptography``'s ``x509.CertificateRevocationList`` arguments in addition
  to the now deprecated ``OpenSSL.crypto.CRL`` arguments.
- Fixed ``test_set_default_verify_paths`` test so that it is skipped if no
  network connection is available.


(adam)
diff -r1.67 -r1.68 pkgsrc/security/py-OpenSSL/Makefile
diff -r1.31 -r1.32 pkgsrc/security/py-OpenSSL/distinfo
diff -r1.3 -r1.4 pkgsrc/security/py-OpenSSL/patches/patch-tests_memdbg.py
cvs diff -r1.67 -r1.68 pkgsrc/security/py-OpenSSL/Makefile (expand / switch to unified diff)

--- pkgsrc/security/py-OpenSSL/Makefile 2023/10/24 22:10:57 1.67
+++ pkgsrc/security/py-OpenSSL/Makefile 2023/10/26 06:32:57 1.68
@@ -1,27 +1,26 @@ @@ -1,27 +1,26 @@
1# $NetBSD: Makefile,v 1.67 2023/10/24 22:10:57 wiz Exp $ 1# $NetBSD: Makefile,v 1.68 2023/10/26 06:32:57 adam Exp $
2 2
3DISTNAME= pyOpenSSL-23.2.0 3DISTNAME= pyOpenSSL-23.3.0
4PKGNAME= ${PYPKGPREFIX}-${DISTNAME:S/py//} 4PKGNAME= ${PYPKGPREFIX}-${DISTNAME:S/py//}
5PKGREVISION= 1 
6CATEGORIES= security python 5CATEGORIES= security python
7MASTER_SITES= ${MASTER_SITE_PYPI:=p/pyOpenSSL/} 6MASTER_SITES= ${MASTER_SITE_PYPI:=p/pyOpenSSL/}
8 7
9MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= https://pyopenssl.org/ 9HOMEPAGE= https://pyopenssl.org/
11COMMENT= Python interface to the OpenSSL library 10COMMENT= Python interface to the OpenSSL library
12LICENSE= apache-2.0 11LICENSE= apache-2.0
13 12
14DEPENDS+= ${PYPKGPREFIX}-cryptography>=40.0.2:../../security/py-cryptography 13DEPENDS+= ${PYPKGPREFIX}-cryptography>=41.0.5:../../security/py-cryptography
15TEST_DEPENDS+= ${PYPKGPREFIX}-flaky-[0-9]*:../../devel/py-flaky 14TEST_DEPENDS+= ${PYPKGPREFIX}-flaky-[0-9]*:../../devel/py-flaky
16TEST_DEPENDS+= ${PYPKGPREFIX}-pretend-[0-9]*:../../devel/py-pretend 15TEST_DEPENDS+= ${PYPKGPREFIX}-pretend-[0-9]*:../../devel/py-pretend
17TEST_DEPENDS+= ${PYPKGPREFIX}-test-[0-9]*:../../devel/py-test 16TEST_DEPENDS+= ${PYPKGPREFIX}-test>=3.0.1:../../devel/py-test
18 17
19PYTHON_VERSIONS_INCOMPATIBLE= 27 18PYTHON_VERSIONS_INCOMPATIBLE= 27
20 19
21# https://github.com/pyca/pyopenssl/issues/656 20# https://github.com/pyca/pyopenssl/issues/656
22do-test: 21do-test:
23 cd ${WRKSRC} && ${SETENV} ${TEST_ENV} pytest-${PYVERSSUFFIX} tests 22 cd ${WRKSRC} && ${SETENV} ${TEST_ENV} pytest-${PYVERSSUFFIX} tests
24 23
25.include "../../lang/python/egg.mk" 24.include "../../lang/python/egg.mk"
26.include "../../security/openssl/buildlink3.mk" 25.include "../../security/openssl/buildlink3.mk"
27.include "../../mk/bsd.pkg.mk" 26.include "../../mk/bsd.pkg.mk"
cvs diff -r1.31 -r1.32 pkgsrc/security/py-OpenSSL/distinfo (expand / switch to unified diff)

--- pkgsrc/security/py-OpenSSL/distinfo 2023/05/31 12:58:48 1.31
+++ pkgsrc/security/py-OpenSSL/distinfo 2023/10/26 06:32:57 1.32
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.31 2023/05/31 12:58:48 adam Exp $ 1$NetBSD: distinfo,v 1.32 2023/10/26 06:32:57 adam Exp $
2 2
3BLAKE2s (pyOpenSSL-23.2.0.tar.gz) = c7f9b3158a6ec659c79536c69542adf487f986fbbc1a0ba69822289f035eb4d7 3BLAKE2s (pyOpenSSL-23.3.0.tar.gz) = 58f995b3f7ba7d483c85820bcaa65ebbd38cd00dc07f5ef48779c8caa59f64cf
4SHA512 (pyOpenSSL-23.2.0.tar.gz) = a467801bf94959a067d9d3551b47d17d4798bf0b87d253d41a89cac9cdb1731a967a98bda3e83ab8a560ed5fdc0a17f34604f3c6e0f6789bc4c920bc49f520c9 4SHA512 (pyOpenSSL-23.3.0.tar.gz) = e75ffd9922798d7bb08be50782a2185aaf69cdc41e4c83e0c904d7b7b3b5da3bbfe73abe965eb0bfe1b325de79eb9f72f16a05444f0310ebfaf8f5bf8ce1fe87
5Size (pyOpenSSL-23.2.0.tar.gz) = 185132 bytes 5Size (pyOpenSSL-23.3.0.tar.gz) = 183043 bytes
6SHA1 (patch-tests_memdbg.py) = a2d2395a0fe1dd1934a50b065fe68f47907f0b87 6SHA1 (patch-tests_memdbg.py) = b3dbfcef4bb83185e064a7c7524c16402309dc06
cvs diff -r1.3 -r1.4 pkgsrc/security/py-OpenSSL/patches/patch-tests_memdbg.py (expand / switch to unified diff)

--- pkgsrc/security/py-OpenSSL/patches/patch-tests_memdbg.py 2020/12/19 11:52:26 1.3
+++ pkgsrc/security/py-OpenSSL/patches/patch-tests_memdbg.py 2023/10/26 06:32:57 1.4
@@ -1,29 +1,29 @@ @@ -1,29 +1,29 @@
1$NetBSD: patch-tests_memdbg.py,v 1.3 2020/12/19 11:52:26 leot Exp $ 1$NetBSD: patch-tests_memdbg.py,v 1.4 2023/10/26 06:32:57 adam Exp $
2 2
3Fix running test on NetBSD. 3Fix running test on NetBSD.
4https://github.com/pyca/pyopenssl/issues/595 4https://github.com/pyca/pyopenssl/issues/595
5 5
6--- tests/memdbg.py.orig 2020-12-15 15:30:54.000000000 +0000 6--- tests/memdbg.py.orig 2023-10-19 22:18:27.000000000 +0000
7+++ tests/memdbg.py 7+++ tests/memdbg.py
8@@ -19,9 +19,9 @@ _ffi.cdef( 8@@ -17,9 +17,9 @@ _ffi.cdef(
9 int CRYPTO_set_mem_functions( 9 int CRYPTO_set_mem_functions(
10 void *(*m)(size_t),void *(*r)(void *,size_t), void (*f)(void *)); 10 void *(*m)(size_t),void *(*r)(void *,size_t), void (*f)(void *));
11  11
12- int backtrace(void **buffer, int size); 12- int backtrace(void **buffer, int size);
13- char **backtrace_symbols(void *const *buffer, int size); 13- char **backtrace_symbols(void *const *buffer, int size);
14- void backtrace_symbols_fd(void *const *buffer, int size, int fd); 14- void backtrace_symbols_fd(void *const *buffer, int size, int fd);
15+ size_t backtrace(void **buffer, size_t size); 15+ size_t backtrace(void **buffer, size_t size);
16+ char **backtrace_symbols(void *const *buffer, size_t size); 16+ char **backtrace_symbols(void *const *buffer, size_t size);
17+ void backtrace_symbols_fd(void *const *buffer, size_t size, int fd); 17+ void backtrace_symbols_fd(void *const *buffer, size_t size, int fd);
18 """ 18 """
19 ) # noqa 19 )
20 _api = _ffi.verify( 20 _api = _ffi.verify(
21@@ -30,7 +30,7 @@ _api = _ffi.verify( 21@@ -28,7 +28,7 @@ _api = _ffi.verify(
22 #include <stdlib.h> 22 #include <stdlib.h>
23 #include <execinfo.h> 23 #include <execinfo.h>
24 """, 24 """,
25- libraries=["crypto"], 25- libraries=["crypto"],
26+ libraries=["crypto", "execinfo"] if sys.platform.startswith('netbsd') else ["crypto"], 26+ libraries=["crypto", "execinfo"] if sys.platform.startswith('netbsd') else ["crypto"],
27 ) 27 )
28 C = _ffi.dlopen(None) 28 C = _ffi.dlopen(None)
29  29