rpms/python-cryptography
7
0
Fork 0
Code Issues Pull Requests Releases Activity
PyCA's cryptography library
143 Commits 19 Branches 37 Tags 302 KiB
Diff 100%
102292e55d
Go to file
Francisco Trivino 102292e55d allow sha1 in OAEP 
In FIPS mode, RSA OAEP padding is refused with an error message:
"This combination of padding and hash algorithm is not supported
by this backend."

It picks up the patch in https://github.com/pyca/cryptography/pull/11536
to allow sha1 in OAEP.

Resolves: https://issues.redhat.com/browse/RHEL-40210
Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
2024-09-12 17:31:52 +02:00
tests sti: add rust-toolset system dependency 2024-08-22 12:11:55 +02:00
.gitignore Update to 43.0.0 2024-08-22 10:26:35 +02:00
11328.patch Update to 43.0.0 2024-08-22 10:26:35 +02:00
11536.patch allow sha1 in OAEP 2024-09-12 17:31:52 +02:00
changelog Update to 43.0.0 2024-08-22 10:26:35 +02:00
conftest-skipper.py Skip iso8601 and pretend tests on RHEL 2021-02-12 16:47:08 +01:00
gating.yaml Added gating.yaml and tests for python-cryptography 2024-06-26 15:27:18 +05:30
python-cryptography.spec allow sha1 in OAEP 2024-09-12 17:31:52 +02:00
README.md Update to 3.4.7, use vectors from sources (#1952024) 2021-04-22 08:07:57 +02:00
sources Update to 43.0.0 2024-08-22 10:26:35 +02:00
vendor_rust.py Update to 43.0.0 2024-08-22 10:26:35 +02:00

README.md

PyCA cryptography

https://cryptography.io/en/latest/

Packaging python-cryptography

The example assumes

  • Fedora Rawhide (f34)
  • PyCA cryptography release 3.4
  • Update Bugzilla issue is RHBZ#00000001

Build new python-cryptography

Switch and update branch

fedpkg switch-branch rawhide
fedpkg pull

Bump version and get sources

rpmdev-bumpspec -c "Update to 3.4 (#00000001)" -n 3.4 python-cryptography.spec
spectool -gf python-cryptography.spec

Upload new source

fedpkg new-sources cryptography-3.4.tar.gz

Commit changes

fedpkg commit --clog
fedpkg push

Build

fedpkg build

RHEL/CentOS builds

RHEL and CentOS use a different approach for Rust crates packaging than Fedora. On Fedora Rust dependencies are packaged as RPMs, e.g. rust-pyo3+default-devel RPM. These packages don't exist on RHEL and CentOS. Instead python-cryptography uses a tar ball with vendored crates. The tar ball is created by a script:

./vendor_rust.py
rhpkg upload cryptography-3.4-vendor.tar.bz2