* Fixed an initialization issue that caused key loading failures for some
users.
.. _v42-0-2:
42.0.2 - 2024-01-30
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1.
Fixed an issue that prevented the use of Python buffer protocol objects in
sign and verify methods on asymmetric keys.
Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange,
X25519PrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange,
X448PrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange,
and DHPrivateKey
:meth:~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange.
.. _v42-0-1:
42.0.1 - 2024-01-24
* Fixed an issue with incorrect keyword-argument naming with ``EllipticCurvePrivateKey``
:meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.sign`.
* Resolved compatibility issue with loading certain RSA public keys in
:func:`~cryptography.hazmat.primitives.serialization.load_pem_public_key`.
.. _v42-0-0:
42.0.0 - 2024-01-22
BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.7.
BACKWARDS INCOMPATIBLE: Loading a PKCS7 with no content field using
:func:~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates
or
:func:~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates
will now raise a ValueError rather than return an empty list.
Parsing SSH certificates no longer permits malformed critical options with
values, as documented in the 41.0.2 release notes.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.0.
Updated the minimum supported Rust version (MSRV) to 1.63.0, from 1.56.0.
We now publish both py37 and py39abi3 wheels. This should
resolve some errors relating to initializing a module multiple times per
... (truncated)
Commits
c49a7a5 changelog and version bump for 42.0.3 (#10396)
Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions |
| --- | --- |
| cryptography | [>= 36.a, < 37] |
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps cryptography from 38.0.1 to 42.0.3.
Changelog
Sourced from cryptography's changelog.
... (truncated)
Commits
c49a7a5
changelog and version bump for 42.0.3 (#10396)396bcf6
fix provider loading take two (#10390) (#10395)0e0e46f
backport: initialize openssl's legacy provider in rust (#10323) (#10333)2202123
changelog and version bump 42.0.2 (#10268)f7032bd
bump openssl in CI (#10298) (#10299)002e886
Fixes #10294 -- correct accidental change to exchange kwarg (#10295) (#10296)92fa9f2
support bytes-like consistently across our asym sign/verify APIs (#10260) (#1...6478f7e
explicitly support bytes-like for signature/data in RSA sign/verify (#10259) ...4bb8596
fix the release script (#10233) (#10254)337437d
42.0.1 bump (#10252)Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions | | --- | --- | | cryptography | [>= 36.a, < 37] |Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show