Commit graph

154 commits

Author SHA1 Message Date
Fabio Valentini
0c8e9c2bd7
Rebuild for openssl crate >= v0.10.70 (RUSTSEC-2025-0004) 2025-02-06 14:47:14 +01:00
Francisco Trivino
24e9fcc67f allow sha1 in OAEP
In FIPS mode, RSA OAEP padding is refused with an error message:
"This combination of padding and hash algorithm is not supported
by this backend."

It picks up the patch in https://github.com/pyca/cryptography/pull/11536
to allow sha1 in OAEP.

Fixes: https://github.com/pyca/cryptography/issues/11512
Related: https://issues.redhat.com/browse/RHEL-40210
Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
2025-01-20 12:13:05 +01:00
Jeremy Cline
fdf62093b4
Flip off lock = true maturin config
Upstream switched to maturin in v43[0]. Since we fiddle with the
lockfile maturin wants to update it since upstream configures `lock =
true`. Turn that off.

This fixes the v43 build in rawhide.

[0] https://github.com/pyca/cryptography/pull/8815

[skip changelog]
2024-07-30 11:17:39 -04:00
Jeremy Cline
696a6afd84
Update to v43.0.0
Additionally, this builds the package with OPENSSL_NO_ENGINE=1

This drops the skip-overflow-tests-32bit.patch as its included in
v43.0.0. It picks up the patch in
https://github.com/pyca/cryptography/pull/11328 to allow building with
OPENSSL_NO_ENGINE=1.
2024-07-24 16:50:41 -04:00
Jeremy Cline
4dc6d7b0ba
Automatically apply all patches during autosetup
Commit 7b18e1445d ("Update to 41.0.3") introduces a patch that was
applied behind a conditional. This is no longer the case, so revert back
to letting autosetup apply all patches.

[skip changelog]
2024-07-24 16:45:52 -04:00
Fedora Release Engineering
bc9adfb4de Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 10:44:42 +00:00
Yaakov Selkowitz
cf26149d18 Remove unused pytest-subtests dependency
This dependency was switched out for a built-in miniature replacement as of
version 41.0.0:

22759dbab0
2024-07-12 10:57:13 -04:00
Yaakov Selkowitz
1483ac22f7 Skip benchmark tests on RHEL
This avoids dependencies on the otherwise unnecessary certifi and
pytest-benchmark.
2024-07-12 10:47:14 -04:00
Jeremy Cline
143d2e3463
Fix the build for ELN
PyO3 doesn't support Python 3.13 until 0.22, but cryptography 0.42 is
using 0.20 at the moment. Use ABI3 forward compatibility for ELN builds
until cryptography updates.

The Rawhide build is using crates from the distro which must be setting
this in some way, but I'm not familiar enough with PyO3 or Fedora's Rust
packaging to find it quickly.

Fixes rhbz#2295602
2024-07-03 14:43:42 -04:00
Miro Hrončok
4dcec288f2 Drop unneeded dependency on tox
There is no additional dependency generated by it, other than tox and tox-current-env.
There is no tox configuration in the source tarball.

If desired, there is a [test] extra, so we could use -x test instead,
but that would break the %if 0%{?fedora} tests dependencies separation.
2024-07-03 16:55:22 +00:00
Jeremy Cline
3d1bdaeb45
Switch to autorelease and autochangelog macros
I forgot to bump manually add a changelog entry for the 42.0.8 update.
Let's make that impossible in the future.

[skip changelog]
2024-07-03 10:27:54 -04:00
Jeremy Cline
cb16ef22f9
Update to 42.0.8, resolves RHBZ#2251816"
This reverts commit 2220bc3f08 and bumps
the version up from 42.0.5 to 42.0.8.

Additionally, a dependency on the openssl-devel-engine is necessary.
Longer-term this should be dropped[0].

[0] https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine

Co-authored-by: Christian Heimes <cheimes@redhat.com>
2024-07-03 09:25:42 -04:00
Python Maint
a7c29b32fa Rebuilt for Python 3.13 2024-06-08 08:13:50 +02:00
Python Maint
1eecfff494 Bootstrap for Python 3.13 2024-06-07 22:03:00 +02:00
Miro Hrončok
2220bc3f08 Revert "Update to 42.0.5, resolves RHBZ#2251816"
This reverts commit 2b20ce4281.
2024-05-28 13:29:39 +02:00
Christian Heimes
2b20ce4281 Update to 42.0.5, resolves RHBZ#2251816 2024-03-06 10:23:38 +01:00
Benjamin A. Beasley
fdff266e83 Update to 41.0.7, fixes rhbz#2255351, CVE-2023-49083 2024-02-01 10:48:14 -05:00
Fedora Release Engineering
cee9a5770d Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 02:54:42 +00:00
Fedora Release Engineering
1c91adf0cd Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 00:29:41 +00:00
Fabio Valentini
3f8bd894be
Rebuild for openssl crate >= v0.10.60 (RUSTSEC-2023-0044, RUSTSEC-2023-0072) 2023-12-01 16:14:04 +01:00
Christian Heimes
bee6bfddb5 Update to 41.0.5, resolves RHBZ#2239707 2023-10-26 17:20:09 +02:00
Christian Heimes
c8cc5d4cdc Build with ouroboros 0.17, fixes rhbz#2214228 / RUSTSEC-2023-0042 2023-08-14 07:24:10 +02:00
Christian Heimes
7b18e1445d Update to 41.0.3
- Update to upstream version 41.0.3
- Use pyo3 0.19

Resolves: rhbz#2211237
2023-08-10 08:41:01 +02:00
Fedora Release Engineering
9421b4a468 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-21 08:43:20 +00:00
Python Maint
f32ed18be7 Rebuilt for Python 3.12 2023-07-10 14:05:42 +02:00
Python Maint
bd226dd0d0 Bootstrap for Python 3.12 2023-06-14 16:13:50 +02:00
Yaakov Selkowitz
a64728bbef Use vendored rust-pem in RHEL builds 2023-06-13 14:51:32 -04:00
Christian Heimes
2894c08790 Update to 40.0.2
Resolves: rhbz#2181430
2023-05-15 13:43:05 +02:00
Miro Hrončok
55eaa10d2d Remove an undesired %{?eln} conditional
Fixes https://github.com/fedora-eln/eln/issues/120
2023-03-13 21:09:36 +01:00
Miro Hrončok
0dbc0e5e1d Don't try to run tests of vendored dependencies in %check 2023-03-09 14:56:50 +01:00
Miro Hrončok
231f32cf96 Don't run tests requiring pytz on RHEL
pytz is unwanted on RHEL 10+.
2023-03-09 12:55:39 +01:00
Christian Heimes
5c59e50b4e Update to 39.0.2
Resolves: rhbz#2124729
2023-03-09 08:19:20 +01:00
Fabio Valentini
cf6e4c6ecf
ensure correct compiler flags are used for Rust code 2023-03-01 00:06:55 +01:00
Christian Heimes
9e3c824a6b Fix CVE-2023-23931 and FTBFS
Don't allow update_into to mutate immutable objects, resolves rhbz#2171820
Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt, resolves rhbz#2171661
2023-02-22 09:57:35 +01:00
Fedora Release Engineering
25a80244fe Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-20 12:25:02 +00:00
Charalampos Stratakis
4c529569ef Remove no longer used macro 2023-01-10 00:38:21 +01:00
Charalampos Stratakis
ebf415a04b Convert the license tag to SPDX and add missing PSF license 2023-01-10 00:38:21 +01:00
Christian Heimes
19e9b97332 Enable SHA1 signatures in test suite (ELN-only) 2022-12-09 12:09:43 +01:00
Miro Hrončok
29c1c4ffe0 Drop unused manual requirement on six, drop duplicated manual requirement on cffi
The Python-related Requires already were:

    python(abi) = 3.11
    python3-cffi >= 1.7
    python3-six >= 1.4.1
    python3.11dist(cffi) >= 1.12

Now they are:

    python(abi) = 3.11
    python3.11dist(cffi) >= 1.12
2022-08-17 12:23:03 +02:00
Fedora Release Engineering
f11c50a6f7 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 17:38:51 +00:00
Python Maint
62733ee588 Rebuilt for Python 3.11 2022-06-14 12:08:28 +02:00
Python Maint
697f9bc002 Bootstrap for Python 3.11 2022-06-14 08:41:16 +02:00
Christian Heimes
58e8828364 Update to 37.0.2, resolves rhbz#2078968 2022-05-05 19:49:44 +02:00
Christian Heimes
f5e60ad520 Skip unstable memleak tests, resolves: RHBZ#2042413 2022-01-27 14:43:41 +01:00
Fedora Release Engineering
78e9ac8bb3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-21 11:26:23 +00:00
Christian Heimes
726f08f3c2 Update to 36.0.0, fixes RHBZ#2025347 2021-11-22 23:05:16 +01:00
Christian Heimes
0d7db7d607 Require rust-asn1 >= 0.6.4 2021-09-30 09:55:19 +02:00
Christian Heimes
6fb44d50f2 Update to 35.0.0 (#2009117) 2021-09-30 08:19:15 +02:00
Sahana Prasad
33bbaec862 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:12:30 +02:00
Fedora Release Engineering
ade913d1ad - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-23 05:54:42 +00:00