PyCA's cryptography library

Go to file

Christian Heimes 9e3c824a6b Fix CVE-2023-23931 and FTBFS Don't allow update_into to mutate immutable objects, resolves rhbz#2171820 Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt, resolves rhbz#2171661		2023-02-22 09:57:35 +01:00
.gitignore	Update to 37.0.2, resolves rhbz#2078968	2022-05-05 19:49:44 +02:00
conftest-skipper.py	Skip iso8601 and pretend tests on RHEL	2021-02-12 16:47:08 +01:00
CVE-2023-23931.patch	Fix CVE-2023-23931 and FTBFS	2023-02-22 09:57:35 +01:00
python-cryptography.spec	Fix CVE-2023-23931 and FTBFS	2023-02-22 09:57:35 +01:00
README.md	Update to 3.4.7, use vectors from sources (#1952024 )	2021-04-22 08:07:57 +02:00
sources	Update to 37.0.2, resolves rhbz#2078968	2022-05-05 19:49:44 +02:00
vendor_rust.py	Create reproducible tar file	2021-02-16 14:33:41 +01:00

README.md

PyCA cryptography

https://cryptography.io/en/latest/

Packaging python-cryptography

The example assumes

Fedora Rawhide (f34)
PyCA cryptography release 3.4
Update Bugzilla issue is RHBZ#00000001

Build new python-cryptography

Switch and update branch

fedpkg switch-branch rawhide
fedpkg pull

Bump version and get sources

rpmdev-bumpspec -c "Update to 3.4 (#00000001)" -n 3.4 python-cryptography.spec
spectool -gf python-cryptography.spec

Upload new source

fedpkg new-sources cryptography-3.4.tar.gz

Commit changes

fedpkg commit --clog
fedpkg push

Build

fedpkg build

RHEL/CentOS builds

RHEL and CentOS use a different approach for Rust crates packaging than Fedora. On Fedora Rust dependencies are packaged as RPMs, e.g. rust-pyo3+default-devel RPM. These packages don't exist on RHEL and CentOS. Instead python-cryptography uses a tar ball with vendored crates. The tar ball is created by a script:

./vendor_rust.py
rhpkg upload cryptography-3.4-vendor.tar.bz2