pyOpenSSL -- A Python wrapper around the OpenSSL library v17.1.0 Release Notes
Release Date: 2017-06-30 // over 6 years ago-
Backward-incompatible changes:
- โ Removed the deprecated
OpenSSL.rand.egd()
function. Applications should preferos.urandom()
for random number generation.#630 <https://github.com/pyca/pyopenssl/pull/630>
_ - โ Removed the deprecated default
digest
argument toOpenSSL.crypto.CRL.export()
. Callers must now always pass an explicitdigest
.#652 <https://github.com/pyca/pyopenssl/pull/652>
_ - Fixed a bug with
ASN1_TIME
casting inX509.set_notBefore()
,X509.set_notAfter()
,Revoked.set_rev_date()
,Revoked.set_nextUpdate()
, andRevoked.set_lastUpdate()
. You must now pass times in the formYYYYMMDDhhmmssZ
.YYYYMMDDhhmmss+hhmm
andYYYYMMDDhhmmss-hhmm
will no longer work.#612 <https://github.com/pyca/pyopenssl/pull/612>
_
๐ Deprecations: ^
- ๐ Deprecated the legacy "Type" aliases:
ContextType
,ConnectionType
,PKeyType
,X509NameType
,X509ExtensionType
,X509ReqType
,X509Type
,X509StoreType
,CRLType
,PKCS7Type
,PKCS12Type
,NetscapeSPKIType
. The names without the "Type"-suffix should be used instead.
๐ Changes: ^
- Added
OpenSSL.crypto.X509.from_cryptography()
andOpenSSL.crypto.X509.to_cryptography()
for converting X.509 certificate to and from pyca/cryptography objects.#640 <https://github.com/pyca/pyopenssl/pull/640>
_ - Added
OpenSSL.crypto.X509Req.from_cryptography()
,OpenSSL.crypto.X509Req.to_cryptography()
,OpenSSL.crypto.CRL.from_cryptography()
, andOpenSSL.crypto.CRL.to_cryptography()
for converting X.509 CSRs and CRLs to and from pyca/cryptography objects.#645 <https://github.com/pyca/pyopenssl/pull/645>
_ - โ Added
OpenSSL.debug
that allows to get an overview of used library versions (including linked OpenSSL) and other useful runtime information usingpython -m OpenSSL.debug
.#620 <https://github.com/pyca/pyopenssl/pull/620>
_ - 0๏ธโฃ Added a fallback path to
Context.set_default_verify_paths()
to accommodate the upcoming release ofcryptography
manylinux1
wheels.#633 <https://github.com/pyca/pyopenssl/pull/633>
_
- โ Removed the deprecated