CVS commit: pkgsrc/security/py-OpenSSL

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Jun 22 19:40:54 UTC 2026

Modified Files:
        pkgsrc/security/py-OpenSSL: Makefile distinfo

Log Message:
py-OpenSSL: update to 26.3.0.

Backward-incompatible changes:

    Dropped support for Python 3.8.

    The minimum cryptography version is now 49.0.0.

    Removed deprecated OpenSSL.crypto.X509Req, OpenSSL.crypto.dump_certificate_request, and OpenSSL.crypto.load_certificate_request. cryptography.x509 should be used instead.

    OpenSSL.SSL.Connection.set_session now raises ValueError if the Session was obtained from a Connection that was using a different Context than this one. OpenSSL requires (but does not verify) 
that sessions only be re-used with a compatible SSL_CTX, so this contract is now enforced.

Deprecations:

    Deprecated OpenSSL.crypto.PKey.generate_key and OpenSSL.crypto.PKey.check. The key generation and loading APIs in cryptography should be used instead.

    Deprecated OpenSSL.crypto.dump_privatekey. The serialization APIs on cryptography private key types should be used instead.

    Deprecated all the mutable APIs on OpenSSL.crypto.X509: set_version, set_pubkey, sign, set_serial_number, gmtime_adj_notAfter, gmtime_adj_notBefore, set_notBefore, set_notAfter, set_issuer, and 
set_subject. cryptography.x509.CertificateBuilder should be used instead.

    Deprecated OpenSSL.SSL.Context.set_passwd_cb. Users should decrypt and load their private keys themselves, with cryptography’s key loading APIs, and then call OpenSSL.SSL.Context.use_privatekey.

    Deprecated OpenSSL.crypto.X509Name, as well as the remaining APIs that consume or return it: OpenSSL.crypto.X509.get_issuer, OpenSSL.crypto.X509.get_subject, and 
OpenSSL.SSL.Context.set_client_ca_list. The APIs in cryptography.x509 should be used instead.

Changes:

    OpenSSL.SSL.Connection.get_client_ca_list now takes an as_cryptography keyword-argument. When True is passed then cryptography.x509.Name are returned, instead of OpenSSL.crypto.X509Name. In the 
future, passing False (the default) will be deprecated.


To generate a diff of this commit:
cvs rdiff -u -r1.81 -r1.82 pkgsrc/security/py-OpenSSL/Makefile
cvs rdiff -u -r1.42 -r1.43 pkgsrc/security/py-OpenSSL/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-OpenSSL/Makefile
diff -u pkgsrc/security/py-OpenSSL/Makefile:1.81 pkgsrc/security/py-OpenSSL/Makefile:1.82
--- pkgsrc/security/py-OpenSSL/Makefile:1.81    Fri May  8 10:04:35 2026
+++ pkgsrc/security/py-OpenSSL/Makefile Mon Jun 22 19:40:54 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.81 2026/05/08 10:04:35 adam Exp $
+# $NetBSD: Makefile,v 1.82 2026/06/22 19:40:54 wiz Exp $
 
-DISTNAME=      pyopenssl-26.2.0
+DISTNAME=      pyopenssl-26.3.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/pyopenssl/OpenSSL/}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/pyopenssl/}
@@ -11,7 +11,7 @@ COMMENT=      Python interface to the OpenSSL
 LICENSE=       apache-2.0
 
 TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools>=78:../../devel/py-setuptools
-DEPENDS+=      ${PYPKGPREFIX}-cryptography>=45.0.7:../../security/py-cryptography
+DEPENDS+=      ${PYPKGPREFIX}-cryptography>=49.0:../../security/py-cryptography
 TEST_DEPENDS+= ${PYPKGPREFIX}-flaky-[0-9]*:../../devel/py-flaky
 TEST_DEPENDS+= ${PYPKGPREFIX}-pretend-[0-9]*:../../devel/py-pretend
 
@@ -20,8 +20,8 @@ TEST_DEPENDS+=        ${PYPKGPREFIX}-pretend-[0
 DEPENDS+=      ${PYPKGPREFIX}-typing-extensions>=4.9:../../devel/py-typing-extensions
 .endif
 
-# as of 26.0.0
-# 1 failed, 469 passed, 1 skipped, 357 warnings, 3 errors
+# as of 26.3.0
+# 1 failed, 427 passed, 1 skipped, 455 warnings, 3 errors
 
 .include "../../lang/python/wheel.mk"
 .include "../../security/openssl/buildlink3.mk"

Index: pkgsrc/security/py-OpenSSL/distinfo
diff -u pkgsrc/security/py-OpenSSL/distinfo:1.42 pkgsrc/security/py-OpenSSL/distinfo:1.43
--- pkgsrc/security/py-OpenSSL/distinfo:1.42    Fri May  8 10:04:35 2026
+++ pkgsrc/security/py-OpenSSL/distinfo Mon Jun 22 19:40:54 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.42 2026/05/08 10:04:35 adam Exp $
+$NetBSD: distinfo,v 1.43 2026/06/22 19:40:54 wiz Exp $
 
-BLAKE2s (pyopenssl-26.2.0.tar.gz) = 3dae985efdb1e42b308f85c56cc226e37bacdc46badababa1f0c6eae4601120c
-SHA512 (pyopenssl-26.2.0.tar.gz) = 701f205adad7384731710f572b48a41af87ea4ba7c7111421962e01079407f3e7b289dd5972feec80a6d182b818ee39e45c88464108589b16fe8239c19080265
-Size (pyopenssl-26.2.0.tar.gz) = 182195 bytes
+BLAKE2s (pyopenssl-26.3.0.tar.gz) = 4f34af256c9e30b6a4265e25af2e7df99f250b90b803dcd7f49d337b89030fef
+SHA512 (pyopenssl-26.3.0.tar.gz) = b3f98a1d2b7ad85606dc38a85449b89660049384b4914b0c66465f0bceafa5b26316223bf41dd2929cd36091e871d2226d06d0d84c969835bc199632c882b484
+Size (pyopenssl-26.3.0.tar.gz) = 182024 bytes