pyOpenSSL -- A Python wrapper around the OpenSSL library v19.1.0 Release Notes

Release Date: 2019-11-18 // 25 days ago
  • Backward-incompatible changes:

    • ✂ Removed deprecated ContextType, ConnectionType, PKeyType, X509NameType, X509ReqType, X509Type, X509StoreType, CRLType, PKCS7Type, PKCS12Type, and NetscapeSPKIType aliases. Use the classes without the Type suffix instead. #814 <https://github.com/pyca/pyopenssl/pull/814>_
    • 🍎 The minimum cryptography version is now 2.8 due to issues on macOS with a transitive dependency. #875 <https://github.com/pyca/pyopenssl/pull/875>_

    🗄 Deprecations: ^

    • Deprecated OpenSSL.SSL.Context.set_npn_advertise_callback, OpenSSL.SSL.Context.set_npn_select_callback, and OpenSSL.SSL.Connection.get_next_proto_negotiated. ALPN should be used instead. #820 <https://github.com/pyca/pyopenssl/pull/820>_

    🔄 Changes: ^

    • 👌 Support bytearray in SSL.Connection.send() by using cffi's from_buffer. #852 <https://github.com/pyca/pyopenssl/pull/852>_
    • The OpenSSL.SSL.Context.set_alpn_select_callback can return a new NO_OVERLAPPING_PROTOCOLS sentinel value to allow a TLS handshake to complete without an application protocol.


Previous changes from v19.0.0

  • Backward-incompatible changes:

    • X509Store.add_cert no longer raises an error if you add a duplicate cert. #787 <https://github.com/pyca/pyopenssl/pull/787>_

    🗄 Deprecations: ^

    none

    🔄 Changes: ^

    • pyOpenSSL now works with OpenSSL 1.1.1. #805 <https://github.com/pyca/pyopenssl/pull/805>_
    • pyOpenSSL now handles NUL bytes in X509Name.get_components() #804 <https://github.com/pyca/pyopenssl/pull/804>_