search

crate / crate-python

Python DB API client library for CrateDB, using HTTP.
https://cratedb.com/docs/python/
Apache License 2.0
78 stars 31 forks source link

Dependencies: Limit installation to `urllib3<2` #524

Closed amotl closed 1 year ago

amotl commented 1 year ago

We learned that, when installing the upcoming urllib3-2.0.0, it would effectively drop support for TLS 1.0 and 1.1 by default, and crate-python does not offer corresponding fallback adjustments yet. In order not to break things too sloppily, let us postpone this transition, in the spirit of "better safe than sorry".

If you still need to use TLS 1.0 or 1.1 in your application you can still upgrade to v2.0, you’ll only need to set ssl_minimum_version to the proper value to continue using legacy TLS versions.

-- https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html#modern-security-by-default

In order to follow up on this, I've created crate/crate-python#632.

/cc @seut