diff options
| -rw-r--r-- | debian/changelog | 7 | ||||
| -rw-r--r-- | debian/patches/lp2081751-replace-verifier-with-verify.patch | 46 | ||||
| -rw-r--r-- | debian/patches/series | 1 |
3 files changed, 54 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 50bf7f3..282e20e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +python-cepces (0.3.7-0ubuntu2) plucky; urgency=medium + + * d/p/lp2081751-replace-verifier-with-verify.patch (LP: #2081751) + - Replaces RSAPublicKey.verifier with RSAPublicKey.verify call + + -- Dariusz Gadomski <dgadomski@ubuntu.com> Tue, 22 Oct 2024 11:11:55 +0200 + python-cepces (0.3.7-0ubuntu1) mantic; urgency=medium * Initial release. diff --git a/debian/patches/lp2081751-replace-verifier-with-verify.patch b/debian/patches/lp2081751-replace-verifier-with-verify.patch new file mode 100644 index 0000000..b236db5 --- /dev/null +++ b/debian/patches/lp2081751-replace-verifier-with-verify.patch @@ -0,0 +1,46 @@ +Description: Replaces .verifier with .verify method + Cryptography removed _RSAPublicKey.verifier in favor of + _RSAPublicKey.verify in release 37. + . + +--- +Origin: upstream, https://github.com/openSUSE/cepces/pull/42/commits/bf3c19c63431bf97ed5a8f491377ddc634b43fc8 +Bug: https://github.com/openSUSE/cepces/issues/41 +Bug-Ubuntu: https://launchpad.net/bugs/2081751 +Last-Update: 2024-10-22 + +--- python-cepces-0.3.7.orig/cepces/core.py ++++ python-cepces-0.3.7/cepces/core.py +@@ -243,25 +243,23 @@ class Service(Base): + """ + sig_hash_alg = cert.signature_hash_algorithm + sig_bytes = cert.signature ++ sig_data = cert.tbs_certificate_bytes + issuer_public_key = issuer.public_key() + + # Check the type of public key + if isinstance(issuer_public_key, rsa.RSAPublicKey): +- verifier = issuer_public_key.verifier( +- sig_bytes, padding.PKCS1v15(), sig_hash_alg, ++ issuer_public_key.verify( ++ sig_bytes, sig_data, padding.PKCS1v15(), sig_hash_alg, + ) + elif isinstance(issuer_public_key, ec.EllipticCurvePublicKey): +- verifier = issuer_public_key.verifier( +- sig_bytes, ec.ECDSA(sig_hash_alg), ++ issuer_public_key.verify( ++ sig_bytes, sig_data, ec.ECDSA(sig_hash_alg), + ) + else: +- verifier = issuer_public_key.verifier( +- sig_bytes, sig_hash_alg, ++ issuer_public_key.verify( ++ sig_bytes, sig_data, sig_hash_alg, + ) + +- verifier.update(cert.tbs_certificate_bytes) +- verifier.verify() +- + return True + + def _resolve_chain(self, data, child=None): diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 0000000..f82476a --- /dev/null +++ b/debian/patches/series @@ -0,0 +1 @@ +lp2081751-replace-verifier-with-verify.patch |