File _patchinfo of Package patchinfo.14650
<patchinfo incident="14650">
<category>recommended</category>
<rating>moderate</rating>
<packager>msmeissn</packager>
<summary>Recommended update for python-pyOpenSSL</summary>
<description>
This update for python-pyOpenSSL fixes the following issues:
python-pyOpenSSL was updated to version 17.1.0.
Backward-incompatible changes:
* Removed the deprecated ``OpenSSL.rand.egd()`` function.
Applications should prefer ``os.urandom()`` for random number generation.
`#630 <https://github.com/pyca/pyopenssl/pull/630>`_
* Removed the deprecated default ``digest`` argument to ``OpenSSL.crypto.CRL.export()``.
Callers must now always pass an explicit ``digest``.
`#652 <https://github.com/pyca/pyopenssl/pull/652>`_
* Fixed a bug with ``ASN1_TIME`` casting in ``X509.set_notBefore()``,
``X509.set_notAfter()``, ``Revoked.set_rev_date()``, ``Revoked.set_nextUpdate()``,
and ``Revoked.set_lastUpdate()``. You must now pass times in the form
``YYYYMMDDhhmmssZ``. ``YYYYMMDDhhmmss+hhmm`` and ``YYYYMMDDhhmmss-hhmm``
will no longer work. `#612 <https://github.com/pyca/pyopenssl/pull/612>`_
Deprecations:
* Deprecated the legacy "Type" aliases: ``ContextType``, ``ConnectionType``,
``PKeyType``, ``X509NameType``, ``X509ExtensionType``, ``X509ReqType``,
``X509Type``, ``X509StoreType``, ``CRLType``, ``PKCS7Type``, ``PKCS12Type``,
``NetscapeSPKIType``.
The names without the "Type"-suffix should be used instead.
Changes:
* Added ``OpenSSL.crypto.X509.from_cryptography()`` and ``OpenSSL.crypto.X509.to_cryptography()``
for converting X.509 certificate to and from pyca/cryptography objects.
`#640 <https://github.com/pyca/pyopenssl/pull/640>`_
* Added ``OpenSSL.crypto.X509Req.from_cryptography()``, ``OpenSSL.crypto.X509Req.to_cryptography()``,
``OpenSSL.crypto.CRL.from_cryptography()``, and ``OpenSSL.crypto.CRL.to_cryptography()``
for converting X.509 CSRs and CRLs to and from pyca/cryptography objects.
`#645 <https://github.com/pyca/pyopenssl/pull/645>`_
* Added ``OpenSSL.debug`` that allows to get an overview of used library versions (including
linked OpenSSL) and other useful runtime information using ``python -m OpenSSL.debug``.
`#620 <https://github.com/pyca/pyopenssl/pull/620>`_
* Added a fallback path to ``Context.set_default_verify_paths()`` to accommodate the upcoming
release of ``cryptography`` ``manylinux1`` wheels.
`#633 <https://github.com/pyca/pyopenssl/pull/633>`_
</description>
<issue id="1138748" tracker="bnc">TRACKERBUG: Update Azure fencing agent PM-1598 ECO-1256</issue>
<issue id="ECO-1256" tracker="jsc"/>
<issue id="PM-1598" tracker="jsc"/>
</patchinfo>