Commit Graph

143 Commits

Author SHA1 Message Date
Francisco Trivino
102292e55d allow sha1 in OAEP
In FIPS mode, RSA OAEP padding is refused with an error message:
"This combination of padding and hash algorithm is not supported
by this backend."

It picks up the patch in https://github.com/pyca/cryptography/pull/11536
to allow sha1 in OAEP.

Resolves: https://issues.redhat.com/browse/RHEL-40210
Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
2024-09-12 17:31:52 +02:00
Francisco Trivino
d387ba975f sti: add rust-toolset system dependency
The macro /usr/lib/rpm/macros.d/macros.rust-toolset is needed to
fix %cargo_prep:

+ %cargo_prep -V 1
/var/tmp/rpm-tmp.HSVni1: line 54: fg: no job control
error: Bad exit status from /var/tmp/rpm-tmp.HSVni1 (%prep)
    Bad exit status from /var/tmp/rpm-tmp.HSVni1 (%prep)

Fixes: FREEIPA-11477
Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
2024-08-22 12:11:55 +02:00
Francisco Trivino
67466d828f Update to 43.0.0
- Resolves: rhbz#2279072
  python-cryptography-43.0.0 is available
- Resolves: RHEL-33747
  Please stop using OpenSSL ENGINE API in python-cryptography
- RHELMISC-6447
  Remove package python-pytest-benchmark from RHEL10-Beta

This builds the package with OPENSSL_NO_ENGINE=1. This drops the
skip-overflow-tests-32bit.patch as its included in v43.0.0. It
picks up the patch in https://github.com/pyca/cryptography/pull/11328
to allow building with OPENSSL_NO_ENGINE=1.

Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
2024-08-22 10:26:35 +02:00
Sudhir Menon
4dbe5f837b Added gating.yaml and tests for python-cryptography
Signed-off-by: Sudhir Menon <sumenon@redhat.com>
2024-06-26 15:27:18 +05:30
Troy Dawson
035125c3fb Bump release for June 2024 mass rebuild 2024-06-24 09:17:03 -07:00
Benjamin A. Beasley
fdff266e83 Update to 41.0.7, fixes rhbz#2255351, CVE-2023-49083 2024-02-01 10:48:14 -05:00
Fedora Release Engineering
cee9a5770d Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 02:54:42 +00:00
Fedora Release Engineering
1c91adf0cd Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 00:29:41 +00:00
Fabio Valentini
3f8bd894be
Rebuild for openssl crate >= v0.10.60 (RUSTSEC-2023-0044, RUSTSEC-2023-0072) 2023-12-01 16:14:04 +01:00
Christian Heimes
bee6bfddb5 Update to 41.0.5, resolves RHBZ#2239707 2023-10-26 17:20:09 +02:00
Christian Heimes
c8cc5d4cdc Build with ouroboros 0.17, fixes rhbz#2214228 / RUSTSEC-2023-0042 2023-08-14 07:24:10 +02:00
Christian Heimes
7b18e1445d Update to 41.0.3
- Update to upstream version 41.0.3
- Use pyo3 0.19

Resolves: rhbz#2211237
2023-08-10 08:41:01 +02:00
Fedora Release Engineering
9421b4a468 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-21 08:43:20 +00:00
Python Maint
f32ed18be7 Rebuilt for Python 3.12 2023-07-10 14:05:42 +02:00
Python Maint
bd226dd0d0 Bootstrap for Python 3.12 2023-06-14 16:13:50 +02:00
Yaakov Selkowitz
a64728bbef Use vendored rust-pem in RHEL builds 2023-06-13 14:51:32 -04:00
Christian Heimes
2894c08790 Update to 40.0.2
Resolves: rhbz#2181430
2023-05-15 13:43:05 +02:00
Miro Hrončok
55eaa10d2d Remove an undesired %{?eln} conditional
Fixes https://github.com/fedora-eln/eln/issues/120
2023-03-13 21:09:36 +01:00
Miro Hrončok
0dbc0e5e1d Don't try to run tests of vendored dependencies in %check 2023-03-09 14:56:50 +01:00
Miro Hrončok
231f32cf96 Don't run tests requiring pytz on RHEL
pytz is unwanted on RHEL 10+.
2023-03-09 12:55:39 +01:00
Christian Heimes
5c59e50b4e Update to 39.0.2
Resolves: rhbz#2124729
2023-03-09 08:19:20 +01:00
Fabio Valentini
cf6e4c6ecf
ensure correct compiler flags are used for Rust code 2023-03-01 00:06:55 +01:00
Christian Heimes
9e3c824a6b Fix CVE-2023-23931 and FTBFS
Don't allow update_into to mutate immutable objects, resolves rhbz#2171820
Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt, resolves rhbz#2171661
2023-02-22 09:57:35 +01:00
Fedora Release Engineering
25a80244fe Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-20 12:25:02 +00:00
Charalampos Stratakis
4c529569ef Remove no longer used macro 2023-01-10 00:38:21 +01:00
Charalampos Stratakis
ebf415a04b Convert the license tag to SPDX and add missing PSF license 2023-01-10 00:38:21 +01:00
Christian Heimes
19e9b97332 Enable SHA1 signatures in test suite (ELN-only) 2022-12-09 12:09:43 +01:00
Miro Hrončok
29c1c4ffe0 Drop unused manual requirement on six, drop duplicated manual requirement on cffi
The Python-related Requires already were:

    python(abi) = 3.11
    python3-cffi >= 1.7
    python3-six >= 1.4.1
    python3.11dist(cffi) >= 1.12

Now they are:

    python(abi) = 3.11
    python3.11dist(cffi) >= 1.12
2022-08-17 12:23:03 +02:00
Fedora Release Engineering
f11c50a6f7 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 17:38:51 +00:00
Python Maint
62733ee588 Rebuilt for Python 3.11 2022-06-14 12:08:28 +02:00
Python Maint
697f9bc002 Bootstrap for Python 3.11 2022-06-14 08:41:16 +02:00
Christian Heimes
58e8828364 Update to 37.0.2, resolves rhbz#2078968 2022-05-05 19:49:44 +02:00
Christian Heimes
f5e60ad520 Skip unstable memleak tests, resolves: RHBZ#2042413 2022-01-27 14:43:41 +01:00
Fedora Release Engineering
78e9ac8bb3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-21 11:26:23 +00:00
Christian Heimes
726f08f3c2 Update to 36.0.0, fixes RHBZ#2025347 2021-11-22 23:05:16 +01:00
Christian Heimes
0d7db7d607 Require rust-asn1 >= 0.6.4 2021-09-30 09:55:19 +02:00
Christian Heimes
6fb44d50f2 Update to 35.0.0 (#2009117) 2021-09-30 08:19:15 +02:00
Sahana Prasad
33bbaec862 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:12:30 +02:00
Fedora Release Engineering
ade913d1ad - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-23 05:54:42 +00:00
Stephen Gallagher
fe349e0ac6
Don't conditionalize Source: directives
This makes the specfile compatible with Fedora ELN, RHEL and
similar Fedora derivatives.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2021-06-18 09:10:18 -04:00
Python Maint
bcc2ec8af9 Rebuilt for Python 3.10 2021-06-03 01:05:02 +02:00
Christian Heimes
b166e77e86 Python 3.10 and OpenSSL 3.0.0 fixes (#1952522)
Fix compatibility issue with Python 3.10. Enums now use same
representation as on Python 3.9.

Backport OpenSSL 3.0.0 compatibility patches.

Resolves: RHBZ#1952522
2021-05-11 10:43:14 +02:00
Christian Heimes
5fdccbab1d Update to 3.4.7, use vectors from sources (#1952024)
python-cryptography now uses source bundle from Github, which contains
sources of vectors, too. Tests are no longer depending on
python3-cryptography-vectors. Instead tests are using the bundles
vectors package.

Resolves RHBZ#1952024
2021-04-22 08:07:57 +02:00
Christian Heimes
19b6996e72 Mention vendoring for RHEL/CentOS packaging 2021-04-13 08:44:13 +02:00
Miro Hrončok
7e4d2cc3e8 This is now a Rust package, hence it only builds on %{rust_arches}
No real difference for Fedora or modern RHEL, but the guidelines say so:

https://docs.fedoraproject.org/en-US/packaging-guidelines/Rust/#_exclusivearch
2021-03-10 13:18:44 +01:00
Christian Heimes
7898d952a8 Update to 3.4.6 (#1927044) 2021-03-03 13:28:42 +01:00
Christian Heimes
fd227175fd Create reproducible tar file 2021-02-16 14:33:41 +01:00
Christian Heimes
f8b1daa766 Update to 3.4.5 (#1927044) 2021-02-15 08:22:18 +01:00
Christian Heimes
cf06cdcb94 Skip iso8601 and pretend tests on RHEL 2021-02-12 16:47:08 +01:00
Christian Heimes
cb73845600 Provide RHEL build infrastructure 2021-02-12 11:33:41 +01:00