Bump cryptography from 2.3 to 3.1.1

Bumps cryptography from 2.3 to 3.1.1.

Changelog

Sourced from cryptography's changelog.

3.1.1 - 2020-09-22


* Updated Windows, macOS, and ``manylinux`` wheels to be compiled with
  OpenSSL 1.1.1h.
.. _v3-1:
3.1 - 2020-08-26

* **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
  :term:`U-label` parsing in various X.509 classes. This support was originally
  deprecated in version 2.1 and moved to an extra in 2.5.
* Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
  the OpenSSL project. The next version of ``cryptography`` will drop support
  for it.
* Deprecated support for Python 3.5. This version sees very little use and will
  be removed in the next release.
* ``backend`` arguments to functions are no longer required and the
  default backend will automatically be selected if no ``backend`` is provided.
* Added initial support for parsing certificates from PKCS7 files with
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
  and
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
  .
* Calling ``update`` or ``update_into`` on
  :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
  longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
  also resolves the same issue in :doc:`/fernet`.

.. _v3-0:

3.0 - 2020-07-20


BACKWARDS INCOMPATIBLE: Removed support for passing an
:class:~cryptography.x509.Extension instance to
:meth:~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier,
as per our deprecation policy.
BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has
been removed (2.9.1+ is still supported).
BACKWARDS INCOMPATIBLE: Dropped support for macOS 10.9, macOS users must
upgrade to 10.10 or newer.
BACKWARDS INCOMPATIBLE: RSA
:meth:~cryptography.hazmat.primitives.asymmetric.rsa.generate_private_key
no longer accepts public_exponent values except 65537 and 3 (the latter
for legacy purposes).
BACKWARDS INCOMPATIBLE: X.509 certificate parsing now enforces that the
version field contains a valid value, rather than deferring this check
</tr></table>

... (truncated)

Commits

d4e17ea 3.1.1 release (#5475)
ba2c0e5 3.1 release (#5430)
c63106c Build manylinux wheels with Zuul (#5386)
bda1387 new black, actually slightly different than the old black (#5429)
0b24359 remove keywords with side effects hack in setup.py (#5426)
1394edb rephrase changelog entry (#5422)
b9d26d2 add some words about separating ECDH and ECDSA (#5423)
ed3ded4 bump libressl 3.1.x (#5421)
b6c51be document that we auto-chunk on symmetric cipher contexts now (#5420)
f90ba18 chunked update_into (#5419)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

loris-imageserver / loris

Bump cryptography from 2.3 to 3.1.1 #515