Mailman 3 June 2015 - Cryptography-dev

verify X509 certificate
by Alexey Kuchmenko June 9, 2015

June 9, 2015

Hi! How do I verify X509 cert? I see X509_verify_cert() function in bindings/openssl/x509_vfy.py, but it looks like it is not exposed by criptography.io API. I need to - verify cert is not expired (by date, no revocation list) - cert is issued by one of trusted certificates (issuer chain length max=1, I have certificates of all possible issuers)

2 1

cffi 1.0 (new compilation system)
by Paul Kehrer June 9, 2015

June 9, 2015

Over the past weekend we merged (https://github.com/pyca/cryptography/pull/1986) a major improvement to the way we compile our bindings. The recent release of cffi 1.0+ brings a new out of line API mode using "set_source" and we have converted pyca/cryptography to use that. This allows us to do a more traditional compile phase, removing much of our monkeypatching and dramatically reducing overhead on import (both in time and memory). However, this is a big change, so I'm sending this email to encourage people to clone master (https://github.com/pyca/cryptography) and verify that everything is working as expected in your environment. If you run into problems please file issues ASAP. Anything we uncover before the tenth feature release (which will be versioned 1.0!) is great. -Paul Kehrer (reaperhulk)

1 0

PyCA cryptography 0.9.1
by Paul Kehrer June 6, 2015

June 6, 2015

PyCA cryptography 0.9.1 has been released. This release corrects a potential security issue: * **SECURITY ISSUE**: Fixed a double free in the OpenSSL backend when using DSA to verify signatures. Note that this only affects PyPy 2.6.0 and (presently unreleased) CFFI versions greater than 1.1.0. -Paul Kehrer (reaperhulk)

1 0

Release schedule
by Pitucha, Stanislaw Izaak June 3, 2015

June 3, 2015

Hi all, I couldn’t find a release schedule on the project’s website, but I’m really interested in the next one. Specifically due to the added ASN1_TIME functions and fixed notBefore/notAfter interface. Could you let me know when will it happen approximately? (weeks/months?) We're trying to use the project in Anchor (in stackforge / openstack), but the notBefore/notAfter 0.9 is just not really usable without very creative and possibly very wrong code. Thanks, Stanislaw Pitucha

2 1