- update to 24.1.0:
  * Removed the deprecated OpenSSL.crypto.PKCS12 and
    OpenSSL.crypto.NetscapeSPKI. OpenSSL.crypto.PKCS12 may be
    replaced by the PKCS#12 APIs in the cryptography package.

• Files Changed
• Browse Source

- update to 24.0.0:
  * Added OpenSSL.SSL.Connection.get_selected_srtp_profile to
    determine which SRTP profile was negotiated. #1279.

• Files Changed
• Browse Source

- update to 23.3.0:
  * Dropped support for Python 3.6.
  * The minimum ``cryptography`` version is now 41.0.5.
  * Removed ``OpenSSL.crypto.loads_pkcs7`` and
    ``OpenSSL.crypto.loads_pkcs12`` which had been deprecated for
    3 years.
  * Added ``OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT`` to allow
    legacy insecure renegotiation between OpenSSL and unpatched
    servers.
  * Deprecated ``OpenSSL.crypto.PKCS12`` (which was intended to
    have been deprecated at the same time as
    ``OpenSSL.crypto.load_pkcs12``).
  * Deprecated ``OpenSSL.crypto.NetscapeSPKI``.
  * Deprecated ``OpenSSL.crypto.CRL``
  * Deprecated ``OpenSSL.crypto.Revoked``
  * Deprecated ``OpenSSL.crypto.load_crl`` and
    ``OpenSSL.crypto.dump_crl``
  * Deprecated ``OpenSSL.crypto.sign`` and
    ``OpenSSL.crypto.verify``
  * Deprecated ``OpenSSL.crypto.X509Extension``
  * Changed ``OpenSSL.crypto.X509Store.add_crl`` to also accept
  * ``cryptography``'s ``x509.CertificateRevocationList``
    arguments in addition
  * to the now deprecated ``OpenSSL.crypto.CRL`` arguments.
  * Fixed ``test_set_default_verify_paths`` test so that it is
    skipped if no network connection is available.

- Inject multibuild to avoid a build loop.
  python-pyOpenSSL-always-overflow.patch
- fixed doc generation

• Files Changed
• Browse Source

- update to 23.2.0:
  * Removed ``X509StoreFlags.NOTIFY_POLICY``.
  * ``cryptography`` maximum version has been increased to
    41.0.x.
  * Invalid versions are now rejected in
    ``OpenSSL.crypto.X509Req.set_version``.
  * Added ``X509VerificationCodes`` to ``OpenSSL.SSL``.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 23.1.1:
  * Worked around an issue in OpenSSL 3.1.0 which caused
    `X509Extension.get_short_name` to raise an exception when no
    short name was known to OpenSSL.

- update to 23.1.0:
  * ``cryptography`` maximum version has been increased to
    40.0.x.
  * Add ``OpenSSL.SSL.Connection.DTLSv1_get_timeout`` and
    ``OpenSSL.SSL.Connection.DTLSv1_handle_timeout``
    to support DTLS timeouts `#1180

• Files Changed
• Browse Source

- update to 23.0.0:
  * Add ``OpenSSL.SSL.X509StoreFlags.PARTIAL_CHAIN`` constant to allow for
    users
  to perform certificate verification on partial certificate chains.
  * ``cryptography`` maximum version has been increased to 39.0.x.
- drop pyOpenSSL-pr1158-conditional-__all__.patch (upstream)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 21.0.0 (bsc#1200771, jsc#SLE-24519):

• Files Changed
• Browse Source

- update to 21.0.0 (bsc#1200771):

• Files Changed
• Browse Source

- Shift BuildRequires on openssl, it's only required for tests.

• Files Changed
• Browse Source

- update to 22.0.0:
  - Drop support for Python 2.7.
  - The minimum ``cryptography`` version is now 35.0.
  - Expose wrappers for some `DTLS
    <https://en.wikipedia.org/wiki/Datagram_Transport_Layer_Security>`_
    primitives.
- drop check_inv_ALPN_lists.patch: upstream

• Files Changed
• Browse Source

- Inject multibuild to avoid a build loop.

• Files Changed
• Browse Source

- Add check_inv_ALPN_lists.patch checks for invalid ALPN lists
  before calling OpenSSL (gh#pyca/pyopenssl#1056).
- update to 21.0.0:
  - The minimum ``cryptography`` version is now 3.3.
  - Drop support for Python 3.5
  - Raise an error when an invalid ALPN value is set.
  - Added ``OpenSSL.SSL.Context.set_min_proto_version`` and ``OpenSSL.SSL.Context.set_max_proto_version``
  - Updated ``to_cryptography`` and ``from_cryptography`` methods to support an
    upcoming release of ``cryptography`` without raising deprecation warnings.

• Files Changed
• Browse Source

- update to 20.0.1:
  - Fixed compatibility with OpenSSL 1.1.0.

• Files Changed
• Browse Source

- Adjust metadata for skip-networked-test.patch and refer to the proper
  upstream ticket gh#pyca/pyopenssl#68.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update to v19.1
  * Removed deprecated aliases ContextType, ConnectionType, PKeyType, X509NameType,
    X509ReqType, X509Type, X509StoreType, CRLType, PKCS7Type, PKCS12Type, and NetscapeSPKIType.
    Use the classes without the ``Type`` suffix instead.
  * The minimum ``cryptography`` version is now 2.8
  * Deprecated ``OpenSSL.SSL.Context.set_npn_advertise_callback,
    OpenSSL.SSL.Context.set_npn_select_callback, and
    OpenSSL.SSL.Connection.get_next_proto_negotiated
    ALPN should be used instead.
  * Support bytearray in SSL.Connection.send() by using cffi's from_buffer
  * The OpenSSL.SSL.Context.set_alpn_select_callback can return a new
    NO_OVERLAPPING_PROTOCOLS sentinel value to allow a TLS handshake
    to complete without an application protocol.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source