CVS commit: pkgsrc/security/py-OpenSSL

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Nov 28 13:21:55 UTC 2024

Modified Files:
        pkgsrc/security/py-OpenSSL: Makefile distinfo

Log Message:
py-OpenSSL: updated to 24.3.0

24.3.0 (2024-11-27)

Backward-incompatible changes:

- Removed the deprecated ``OpenSSL.crypto.CRL``, ``OpenSSL.crypto.Revoked``, ``OpenSSL.crypto.dump_crl``, and ``OpenSSL.crypto.load_crl``. ``cryptography.x509``'s CRL functionality should be used 
instead.
- Removed the deprecated ``OpenSSL.crypto.sign`` and ``OpenSSL.crypto.verify``. ``cryptography.hazmat.primitives.asymmetric``'s signature APIs should be used instead.

Deprecations:

- Deprecated ``OpenSSL.rand`` - callers should use ``os.urandom()`` instead.
- Deprecated ``add_extensions`` and ``get_extensions`` on ``OpenSSL.crypto.X509Req`` and ``OpenSSL.crypto.X509``. These should have been deprecated at the same time ``X509Extension`` was. Users 
should use pyca/cryptography's X.509 APIs instead.
- Deprecated ``OpenSSL.crypto.get_elliptic_curves`` and ``OpenSSL.crypto.get_elliptic_curve``, as well as passing the reult of them to ``OpenSSL.SSL.Context.set_tmp_ecdh``, users should instead pass 
curves from ``cryptography``.
- Deprecated passing ``X509`` objects to ``OpenSSL.SSL.Context.use_certificate``, ``OpenSSL.SSL.Connection.use_certificate``, ``OpenSSL.SSL.Context.add_extra_chain_cert``, and 
``OpenSSL.SSL.Context.add_client_ca``, users should instead pass ``cryptography.x509.Certificate`` instances. This is in preparation for deprecating pyOpenSSL's ``X509`` entirely.
- Deprecated passing ``PKey`` objects to ``OpenSSL.SSL.Context.use_privatekey`` and ``OpenSSL.SSL.Connection.use_privatekey``, users should instead pass ``cryptography`` priate key instances. This is 
in preparation for deprecating pyOpenSSL's ``PKey`` entirely.

Changes:

* ``cryptography`` maximum version has been increased to 44.0.x.
* ``OpenSSL.SSL.Connection.get_certificate``, ``OpenSSL.SSL.Connection.get_peer_certificate``, ``OpenSSL.SSL.Connection.get_peer_cert_chain``, and ``OpenSSL.SSL.Connection.get_verified_chain`` now 
take an ``as_cryptography`` keyword-argument. When ``True`` is passed then ``cryptography.x509.Certificate`` are returned, instead of ``OpenSSL.crypto.X509``. In the future, passing ``False`` (the 
default) will be deprecated.


To generate a diff of this commit:
cvs rdiff -u -r1.72 -r1.73 pkgsrc/security/py-OpenSSL/Makefile
cvs rdiff -u -r1.35 -r1.36 pkgsrc/security/py-OpenSSL/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-OpenSSL/Makefile
diff -u pkgsrc/security/py-OpenSSL/Makefile:1.72 pkgsrc/security/py-OpenSSL/Makefile:1.73
--- pkgsrc/security/py-OpenSSL/Makefile:1.72    Mon Nov 11 07:28:53 2024
+++ pkgsrc/security/py-OpenSSL/Makefile Thu Nov 28 13:21:55 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.72 2024/11/11 07:28:53 wiz Exp $
+# $NetBSD: Makefile,v 1.73 2024/11/28 13:21:55 adam Exp $
 
-DISTNAME=      pyopenssl-24.2.1
+DISTNAME=      pyopenssl-24.3.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/pyopenssl/OpenSSL/}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/pyopenssl/}
@@ -15,8 +15,6 @@ DEPENDS+=     ${PYPKGPREFIX}-cryptography>=4
 TEST_DEPENDS+= ${PYPKGPREFIX}-flaky-[0-9]*:../../devel/py-flaky
 TEST_DEPENDS+= ${PYPKGPREFIX}-pretend-[0-9]*:../../devel/py-pretend
 
-PYTHON_VERSIONS_INCOMPATIBLE=  27
-
 # 506 passed, 1 skipped, 6 warnings, 3 errors
 # one test failure reported at: https://github.com/pyca/pyopenssl/issues/656
 

Index: pkgsrc/security/py-OpenSSL/distinfo
diff -u pkgsrc/security/py-OpenSSL/distinfo:1.35 pkgsrc/security/py-OpenSSL/distinfo:1.36
--- pkgsrc/security/py-OpenSSL/distinfo:1.35    Sun Jul 21 09:02:03 2024
+++ pkgsrc/security/py-OpenSSL/distinfo Thu Nov 28 13:21:55 2024
@@ -1,6 +1,5 @@
-$NetBSD: distinfo,v 1.35 2024/07/21 09:02:03 wiz Exp $
+$NetBSD: distinfo,v 1.36 2024/11/28 13:21:55 adam Exp $
 
-BLAKE2s (pyopenssl-24.2.1.tar.gz) = 5f23745b9ebb22c78b44c637a63e40c1533eb16a973ae79dc362bfdcc3da1618
-SHA512 (pyopenssl-24.2.1.tar.gz) = 4d0cdf71a5ae785644bd466ef094592fbf4ab804de8d153c139a88d3ff9b8cc80d073f3d49d4dc73d8ebf97a867e1560a5308b998f7ef0ccc734dcc56697c831
-Size (pyopenssl-24.2.1.tar.gz) = 184323 bytes
-SHA1 (patch-tests_memdbg.py) = b3dbfcef4bb83185e064a7c7524c16402309dc06
+BLAKE2s (pyopenssl-24.3.0.tar.gz) = 38da46910fec2ecd0680b20fa2f9a8a505d3616a58adf40b1361b587ddcac4e2
+SHA512 (pyopenssl-24.3.0.tar.gz) = ca46a56a5c97ac91d1cbe1cb8b4d9e6d84610785736e925a579560802c1dce6b1cd95c0fed5c25aa775be8a4ae514c5962a86f2db5ecab4506e67ba80ebebd44
+Size (pyopenssl-24.3.0.tar.gz) = 178944 bytes