-
0.41.0
0.41.0 - 2024-02-13 ------------------- - fix: test/smime: Rewind BIO before repeadetly invoking verify. - feat: React to the possible error when calling BIO_set_cipher(3). - Return M2Crypto.version_info - Revert 957df43e (workaround for the problem in OpenSSL, which is not needed any more) - Fix Windows builds (fix #319) - feat: Remove py2k constructs in setup.py - Fix mkpath call (compatibility with Python >= 3.2) - Remove generated files from sources - feat!: Remove six and make whole project Py3k only (see #328) - Don't use setup.py commands anymore. - 32bit Python actually has Y2K38 problem, because time_t is long int (see #341) - From TAP back to the standard unittest (gh#python-tap/tappy#136)
-
0.40.1
0.40.1 - 2023-10-25 ------------------- - Whoops! The problem with ASN1_Time is not a problem of Windows, but of all 32bit architectures.
-
0.40.0af08fa3b · Release 0.40 ·
0.40.0 - 2023-10-24 ------------------- - OK, SO NOT THIS RELEASE, BUT IN THE NEXT RELEASE PYTHON2 WILL TRULY GO! - BREAKING CHANGES: - There are no SWIG generated files (src/SWIG/_m2crytpo_wrap.c) included anymore, so swig must be installed, no exceptions! Also, for compatibility with Python 3.12+, swig 4.0+ is required. - All support for asyncore has been removed, as it has been removed in Python 3.12 as well (which means also removal of contrib/dispatcher.py, M2Crypto/SSL/ssl_dispatcher.py, ZServerSSL). - All use of distutils (including the bundled ones in setuptools) has been removed, so `setup.py clean` is no more. - Excessively complicated and error-prone __init__py has been cleaned and `import M2Crypto` doesn’t include everything anymore. Imports should specified as for example with `from M2Crypto import foo`. - ASN1_Time handling has been mostly rewritten and it almost works even on Windows. - All tests in Gitlab CI (with exceptions of some skipped tests especially on Windows) are now green, tests of Python 2.7 on CentOS 7 have been included. - Introduce m2.err_clear_error() - Make X509_verify_cert() accessible as m2.x509_verify_cert -
0.39.0
0.39.0 - 2023-01-31 ------------------- - SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE COMPLETELY REMOVED IN THE NEXT RELEASE. - Remove dependency on parameterized and use unittest.subTest instead. - Upgrade embedded six.py module to 1.16.0 (really tiny inconsequential changes). - Make tests working on MacOS again (test_bio_membuf: Use fork) - Use OpenSSL_version_num() instead of unrealiable parsing of .h file. - Mitigate the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657) - Add functionality to extract EC key from public key + Update tests - Worked around compatibility issues with OpenSSL 3.* - Support for Twisted has been deprecated (they have their own SSL support anyway). - Generate TAP while testing. - Stop using GitHub for testing. - Accept a small deviation from time in the testsuite (for systems with non-standard HZ kernel parameter). - Use the default BIO.__del__ rather tha overriding in BIO.File (avoid a memleak). - Resolve "X509_Name.as_der() method from X509.py -> class X509_Name caused segmentation fault"
-
0.38.0269392d5 · New release ·
0.38.0 - 2021-06-14 ------------------- - Remove the last use of setup.py test idiom. - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer. - Add support for arm64 big endian <Steev Klimaszewski> - Make support of RSA_SSLV23_PADDING optional (it has been deprecated). - Move project to src/ layout - Allow verify_cb_* to be called with ok=True <Casey Deccio> - Be prepared if any of constants in x509_vfy.h is not available. - But we do support 3.8 - We DO NOT support Python 2.6.
-
0.37.0
0.37.0 - 2020-12-08 ------------------- - Remove support for CentOS 6 and Python 2.6 (remove tests.vendor module). Python 2.7 is still fully supported. - Remodel CI: - on GitHub switched from Travis-CI to GH Actions - on GitLab-CI: stop testing 2.7 on Fedora, add centos7 - update appveyor.yml - Stop playing with swig in setup.py, we don't support swig 1.* anymore. - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281) - Replace deprecated PyObject_AsReadBuffer with our own shim (thanks to Casey Deccio for saving my bacon there). - Use parametrized to create parametrized tests (new external dependency). - Only use DigestSign() and DigestUpdate() with OpenSSL >= 1.1.1 - Expose all the X509_V_FLAG - Add support for DigestSign* and DigestVerify*
-
0.36.0ea050c41 · New release ·
0.36.0 - 2020-07-13 ------------------- - wrap SocketIO in io.Buffered* for makefile <lethliel> - SSL.Connection.close accepts an argument to force the socket closing <Christophe Haen> - SSL.Connection: make the clientPostConnectionCheck an instance attribute <Christophe Haen> - Fixed bug with usage of unexisting method getreply at SSL_Transport <roman-nagaev> - Add appveyor builds for python 3.7 and 3.8 <Daniel A. Wozniak> - Fixed syntax warning on line 44. <randomfox> - Update M2Crypto.six to 1.13.0 <Matěj Cepl> - base64.decodestring() was finally removed in Python 3.8. <Matěj Cepl> - wrap SocketIO in io.Buffered* for makefile <lethliel> - NULL is legal argument for key and iv paramters of EVP_CipherInit(3) <Matěj Cepl> - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and X509_STORE_SET_FLAGS function <Christophe Haen> - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 <Matěj Cepl> - Extend test cert validity to 2049 <Bernhard M. Wiedemann> - Revert using typing module in 2.6. It is just not worthy. <Matěj Cepl> - Update Debian/stable SSL as well <Matěj Cepl> - Make tests pass again. <Matěj Cepl> - Stop using string module, which has been deprecated. <Matěj Cepl> - Tiny fixes to make pyls more happy <Matěj Cepl> - CI: Rework Fedora CI configuration <Neal Gompa>