You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
278 lines
9.7 KiB
278 lines
9.7 KiB
%{!?python3_pkgversion:%global python3_pkgversion 3}
|
|
|
|
%global srcname cryptography
|
|
# rhbz#2172416: from_buffer(..., require_writable=True)
|
|
%global cffi_version 1.11.5-6
|
|
|
|
Name: python-%{srcname}
|
|
Version: 3.2.1
|
|
Release: 7%{?dist}
|
|
Summary: PyCA's cryptography library
|
|
|
|
Group: Development/Libraries
|
|
License: ASL 2.0 or BSD
|
|
URL: https://cryptography.io/en/latest/
|
|
Source0: https://pypi.io/packages/source/c/%{srcname}/%{srcname}-%{version}.tar.gz
|
|
|
|
Patch0001: 0001-Re-add-deprecated-and-removed-features.patch
|
|
Patch0002: 0002-Support-pytest-3.4.2.patch
|
|
Patch0003: 0003-Skip-iso8601-test-cases.patch
|
|
Patch0004: 0004-Revert-remove-NPN-bindings.patch
|
|
Patch0005: 0005-CVE-2020-36242.patch
|
|
# https://github.com/pyca/cryptography/pull/8230
|
|
Patch0006: 0006-CVE-2023-23931.patch
|
|
|
|
BuildRequires: openssl-devel
|
|
BuildRequires: gcc
|
|
|
|
BuildRequires: python%{python3_pkgversion}-devel
|
|
BuildRequires: python%{python3_pkgversion}-pytest >= 3.4.2
|
|
BuildRequires: python%{python3_pkgversion}-setuptools
|
|
BuildRequires: python%{python3_pkgversion}-pretend
|
|
# BuildRequires: python{python3_pkgversion}-iso8601
|
|
BuildRequires: python%{python3_pkgversion}-cryptography-vectors = %{version}
|
|
BuildRequires: python%{python3_pkgversion}-pytz
|
|
BuildRequires: python%{python3_pkgversion}-six >= 1.4.1
|
|
BuildRequires: python%{python3_pkgversion}-cffi >= %{cffi_version}
|
|
|
|
%description
|
|
cryptography is a package designed to expose cryptographic primitives and
|
|
recipes to Python developers.
|
|
|
|
%package -n python%{python3_pkgversion}-%{srcname}
|
|
Group: Development/Libraries
|
|
Summary: PyCA's cryptography library
|
|
%{?python_provide:%python_provide python%{python3_pkgversion}-%{srcname}}
|
|
|
|
Requires: openssl-libs
|
|
Requires: python%{python3_pkgversion}-six >= 1.4.1
|
|
Requires: python%{python3_pkgversion}-cffi >= %{cffi_version}
|
|
Conflicts: python%{python3_pkgversion}-cryptography-vectors < %{version}
|
|
Conflicts: python%{python3_pkgversion}-cryptography-vectors > %{version}
|
|
|
|
%description -n python%{python3_pkgversion}-%{srcname}
|
|
cryptography is a package designed to expose cryptographic primitives and
|
|
recipes to Python developers.
|
|
|
|
|
|
%prep
|
|
%autosetup -p1 -n %{srcname}-%{version}
|
|
|
|
|
|
%build
|
|
%py3_build
|
|
|
|
|
|
%install
|
|
# Actually other *.c and *.h are appropriate
|
|
# see https://github.com/pyca/cryptography/issues/1463
|
|
find . -name .keep -print -delete
|
|
%py3_install
|
|
|
|
|
|
%check
|
|
# workaround for pytest 3.2.0 bug https://github.com/pytest-dev/pytest/issues/2644
|
|
rm -f tests/hazmat/primitives/test_padding.py
|
|
# don't run hypothesis tests
|
|
rm -rf tests/hypothesis
|
|
PYTHONPATH=%{buildroot}%{python3_sitearch} \
|
|
%{__python3} -m pytest \
|
|
-k "not test_decrypt_invalid_decrypt"
|
|
|
|
|
|
%files -n python%{python3_pkgversion}-%{srcname}
|
|
%doc README.rst docs
|
|
%license LICENSE LICENSE.APACHE LICENSE.BSD
|
|
%{python3_sitearch}/%{srcname}
|
|
%{python3_sitearch}/%{srcname}-%{version}-py*.egg-info
|
|
|
|
|
|
%changelog
|
|
* Fri Dec 01 2023 Christian Heimes <cheimes@redhat.com> - 3.2.1-7
|
|
- Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves: RHEL-17873
|
|
|
|
* Wed Feb 22 2023 Christian Heimes <cheimes@redhat.com> - 3.2.1-6
|
|
- Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172404
|
|
|
|
* Tue Jun 08 2021 Christian Heimes <cheimes@redhat.com> - 3.2.1-5
|
|
- Rebuild for RHEL 8.5
|
|
- Resolves: rhbz#1933071
|
|
|
|
* Tue Feb 09 2021 Christian Heimes <cheimes@redhat.com> - 3.2.1-4
|
|
- CVE-2020-36242: Fixed a bug where certain sequences of update() calls
|
|
when symmetrically encrypting very large payloads (>2GB) could result
|
|
in an integer overflow, leading to buffer overflows.
|
|
- Resolves: rhbz#1926528
|
|
|
|
* Mon Dec 14 17:24:01 CET 2020 Christian Heimes <cheimes@redhat.com> - 3.2.1-3
|
|
- Conflict with non-matching vector package
|
|
|
|
* Mon Dec 14 14:19:42 CET 2020 Christian Heimes <cheimes@redhat.com> - 3.2.1-2
|
|
- Re-add remove NPN bindings, required for pyOpenSSL
|
|
- Resolves: rhbz#1907429
|
|
|
|
* Wed Oct 28 2020 Christian Heimes <cheimes@redhat.com> - 3.2.1-1
|
|
- Rebase to upstream release 3.2.1
|
|
- Resolves: rhbz#1873581
|
|
- Resolves: rhbz#1778939
|
|
- Removed dependencies on python-asn1crypto, python-idna
|
|
|
|
* Tue Nov 12 2019 Christian Heimes <cheimes@redhat.com> - 2.3-3
|
|
- Don't activate custom osrandom engine for FIPS compliance
|
|
- Resolves: rhbz#1762667
|
|
|
|
* Mon Aug 13 2018 Christian Heimes <cheimes@redhat.com> - 2.3-2
|
|
- Use TLSv1.2 in test as workaround for RHBZ#1615099
|
|
- Resolves: RHBZ#1611738
|
|
|
|
* Wed Jul 18 2018 Christian Heimes <cheimes@redhat.com> - 2.3-1
|
|
- New upstream release 2.3
|
|
- Fix AEAD tag truncation bug, CVE-2018-10903, RHBZ#1602755, RHBZ#1602932
|
|
|
|
* Tue Jun 19 2018 Christian Heimes <cheimes@redhat.com> - 2.2.1-2
|
|
- Drop Python 2 subpackages from RHEL 8, fixes RHBZ#1589754
|
|
- Remove unnecessary copy and shebang mangling
|
|
|
|
* Wed Mar 21 2018 Christian Heimes <cheimes@redhat.com> - 2.2.1-1
|
|
- New upstream release 2.2.1
|
|
|
|
* Sun Feb 18 2018 Christian Heimes <cheimes@redhat.com> - 2.1.4-1
|
|
- New upstream release 2.1.4
|
|
|
|
* Sun Feb 18 2018 Christian Heimes <cheimes@redhat.com> - 2.1.3-4
|
|
- Build requires gcc
|
|
|
|
* Mon Feb 12 2018 Iryna Shcherbina <ishcherb@redhat.com> - 2.1.3-3
|
|
- Update Python 2 dependency declarations to new packaging standards
|
|
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
|
|
|
|
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.3-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
* Thu Nov 23 2017 Haïkel Guémar <hguemar@fedoraproject.org> - 2.1.3-1
|
|
- Upstream 2.1.3
|
|
|
|
* Tue Oct 24 2017 Christian Heimes <cheimes@redhat.com> - 2.1-2
|
|
- Change Requires to openssl-libs
|
|
|
|
* Thu Oct 12 2017 Christian Heimes <cheimes@redhat.com> - 2.1-1
|
|
- New upstream release 2.1
|
|
|
|
* Wed Sep 27 2017 Troy Dawson <tdawson@redhat.com> - 2.0.2-3
|
|
- Cleanup spec file conditionals
|
|
|
|
* Thu Aug 03 2017 Christian Heimes <cheimes@redhat.com> - 2.0.2-2
|
|
- Add workaround for pytest bug
|
|
|
|
* Thu Aug 03 2017 Christian Heimes <cheimes@redhat.com> - 2.0.2-1
|
|
- New upstream release 2.0.2
|
|
- Modernize spec
|
|
|
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.9-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.9-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
* Tue Jun 27 2017 Christian Heimes <cheimes@redhat.com> - 1.9-1
|
|
- Upstream release 1.9
|
|
|
|
* Wed Feb 15 2017 Christian Heimes <cheimes@redhat.com> - 1.7.2-1
|
|
- Update to latest upstream
|
|
|
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.1-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
* Thu Jan 05 2017 Matěj Cepl <mcepl@redhat.com> - 1.7.1-1
|
|
- Update to the latest upstream.
|
|
- Add a patch from https://github.com/pyca/cryptography/pull/3328
|
|
|
|
* Tue Dec 13 2016 Charalampos Stratakis <cstratak@redhat.com> - 1.5.3-5
|
|
- Enable tests
|
|
|
|
* Mon Dec 12 2016 Charalampos Stratakis <cstratak@redhat.com> - 1.5.3-4
|
|
- Rebuild for Python 3.6
|
|
- Disable python3 tests for now
|
|
|
|
* Thu Nov 10 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.5.3-3
|
|
- Revert previous change
|
|
|
|
* Thu Nov 10 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.5.3-2
|
|
- Disable tests on releases earlier than 24
|
|
|
|
* Mon Nov 07 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.5.3-1
|
|
- Update to v1.5.3
|
|
- Update source URL
|
|
- Add BR for pytz
|
|
|
|
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-4
|
|
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
|
|
|
|
* Tue May 10 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.3.1-3
|
|
- Remove versioned setuptools dependency
|
|
|
|
* Tue May 10 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.3.1-2
|
|
- Make it easier to build on EL7
|
|
|
|
* Tue May 03 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.3.1-1
|
|
- Update to v1.3.1
|
|
|
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.1-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
* Mon Jan 11 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.2.1-2
|
|
- Move python-cryptograph => python2-cryptography
|
|
|
|
* Sat Jan 09 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1.2.1-1
|
|
- Update to v1.2.1
|
|
|
|
* Wed Nov 11 2015 Robert Kuska <rkuska@redhat.com> - 1.1-1
|
|
- Update to v1.1
|
|
|
|
* Wed Nov 04 2015 Robert Kuska <rkuska@redhat.com> - 1.0.2-2
|
|
- Rebuilt for Python3.5 rebuild
|
|
|
|
* Wed Sep 30 2015 Matěj Cepl <mcepl@redhat.com> - 1.0.2-1
|
|
- New upstream release (fix #1267548)
|
|
|
|
* Wed Aug 12 2015 Nathaniel McCallum <npmccallum@redhat.com> - 1.0-1
|
|
- New upstream release
|
|
|
|
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
* Thu May 14 2015 Nathaniel McCallum <npmccallum@redhat.com> - 0.9-1
|
|
- New upstream release
|
|
- Run tests on RHEL
|
|
- New deps: python-idna, python-ipaddress
|
|
|
|
* Fri Apr 17 2015 Nathaniel McCallum <npmccallum@redhat.com> - 0.8.2-1
|
|
- New upstream release
|
|
- Add python3-pyasn1 Requires (#1211073)
|
|
|
|
* Tue Apr 14 2015 Matej Cepl <mcepl@redhat.com> - 0.8-2
|
|
- Add python-pyasn1 Requires (#1211073)
|
|
|
|
* Fri Mar 13 2015 Nathaniel McCallum <npmccallum@redhat.com> - 0.8-1
|
|
- New upstream release
|
|
- Remove upstreamed patch
|
|
|
|
* Wed Mar 04 2015 Nathaniel McCallum <npmccallum@redhat.com> - 0.7.2-2
|
|
- Add python3-cryptography-vectors build requires
|
|
- Add python-enum34 requires
|
|
|
|
* Tue Feb 03 2015 Nathaniel McCallum <npmccallum@redhat.com> - 0.7.2-1
|
|
- New upstream release. BSD is now an optional license.
|
|
- Fix test running on python3
|
|
- Add upstream patch to fix test paths
|
|
|
|
* Fri Nov 07 2014 Matej Cepl <mcepl@redhat.com> - 0.6.1-2
|
|
- Fix requires, for reasons why other development files were not
|
|
eliminated see https://github.com/pyca/cryptography/issues/1463.
|
|
|
|
* Wed Nov 05 2014 Matej Cepl <mcepl@redhat.com> - 0.6.1-1
|
|
- New upstream release.
|
|
|
|
* Sun Jun 29 2014 Terry Chia <terrycwk1994@gmail.com> 0.4-1
|
|
- initial version
|