PyCA's cryptography library
Go to file
Charalampos Stratakis c6ab1c7d59 Security fix for CVE-2023-49083
Resolves: RHEL-19831
2024-02-07 14:21:37 +01:00
.fmf Replace whole repo with latest content from branch rhel-8.8.0 2023-05-15 16:41:57 +02:00
.gitignore Auto sync2gitlab import of python3.11-cryptography-37.0.2-3.el8.src.rpm 2023-02-18 00:34:18 +00:00
conftest-skipper.py Auto sync2gitlab import of python3.11-cryptography-37.0.2-3.el8.src.rpm 2023-02-18 00:34:18 +00:00
CVE-2023-23931.patch Auto sync2gitlab import of python3.11-cryptography-37.0.2-5.el8.src.rpm 2023-02-27 12:14:21 +00:00
CVE-2023-49083.patch Security fix for CVE-2023-49083 2024-02-07 14:21:37 +01:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 11:16:18 -08:00
plan.fmf Replace whole repo with latest content from branch rhel-8.8.0 2023-05-15 16:41:57 +02:00
python3.11-cryptography.spec Security fix for CVE-2023-49083 2024-02-07 14:21:37 +01:00
README.md Replace whole repo with latest content from branch rhel-8.8.0 2023-05-15 16:41:57 +02:00
sources Auto sync2gitlab import of python3.11-cryptography-37.0.2-3.el8.src.rpm 2023-02-18 00:34:18 +00:00
vendor_rust.py Replace whole repo with latest content from branch rhel-8.8.0 2023-05-15 16:41:57 +02:00

PyCA cryptography

https://cryptography.io/en/latest/

Packaging python-cryptography

The example assumes

  • Fedora Rawhide (f34)
  • PyCA cryptography release 3.4
  • Update Bugzilla issue is RHBZ#00000001

Build new python-cryptography

Switch and update branch

fedpkg switch-branch rawhide
fedpkg pull

Bump version and get sources

rpmdev-bumpspec -c "Update to 3.4 (#00000001)" -n 3.4 python-cryptography.spec
spectool -gf python-cryptography.spec

Upload new source

fedpkg new-sources cryptography-3.4.tar.gz

Commit changes

fedpkg commit --clog
fedpkg push

Build

fedpkg build

RHEL/CentOS builds

RHEL and CentOS use a different approach for Rust crates packaging than Fedora. On Fedora Rust dependencies are packaged as RPMs, e.g. rust-pyo3+default-devel RPM. These packages don't exist on RHEL and CentOS. Instead python-cryptography uses a tar ball with vendored crates. The tar ball is created by a script:

./vendor_rust.py
rhpkg upload cryptography-3.4-vendor.tar.bz2