Mailman 3 November 2023 - Cryptography-dev

PyCA cryptography 41.0.7 released
by Alex Gaynor Nov. 28, 2023

Nov. 28, 2023

PyCA cryptography 41.0.7 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.10+. Changelog (https://cryptography.io/en/latest/changelog/#v41-0-7): * Fixed compilation when using LibreSSL 3.8.2. Alex -- All that is necessary for evil to succeed is for good people to do nothing.

1 0

PyCA cryptography 41.0.6 released
by Paul Kehrer Nov. 27, 2023

Nov. 27, 2023

PyCA cryptography 41.0.6 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.10+. Changelog (https://cryptography.io/en/latest/changelog/#v41-0-6): * Fixed a null-pointer-dereference and segfault that could occur when loading certificates from a PKCS#7 bundle. Credit to pkuzco for reporting the issue. CVE-2023-49083 -Paul Kehrer (reaperhulk)

1 0

Fail to setup the project for contribution
by Jules Marmier Nov. 26, 2023

Nov. 26, 2023

Hi everyone! I'm trying to contribute to the cryptography project but I have some trouble setting up the project. I try to follow the *Getting started* page but the command *nox -e tests -p py310 *don’t succeed. Here are all the commands I run (I'm on a Mac M1) : git clone https://github.com/pyca/cryptography.git virtualenv cryptography source cryptography/bin/activate cd cryptography pip install nox nox -e tests -p py310 My first problem is that this last command does not work and gives me this error message: nox > Python version selection caused no sessions to be selected. But I do have python 3.10 installed. Then I tried to run *nox -e tests. *This command works at first but then I have an error message that I don’t understand (it’s at the end of the message if you need it). I tried to run manually the command *python -m pip install -v -c ci-constraints-requirements.txt '.[test]' *and it works. I don’t understand why it works when I run it manually but not when the script runs it. Thanks for your help, Jules This is I think the most interesting part of my error message (I can send you more if needed) : Caused by: process didn't exit successfully: `rustc --crate-name vcpkg /Users/jules/.cargo/registry/src/index.crates.io-6f17d22bba15001f/vcpkg-0.2.15/src/ lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no -C debug-assertions=off -C overflow-checks=on -C metadata=4128c5710ab69439 -C extra-filename=-4128c5710ab69439 --out-dir /Users/jules/Documents/cryptography/src/rust/target/release/deps -L dependency=/Users/jules/Documents/cryptography/src/rust/target/release/deps --cap-lints allow -Cinstrument-coverage` (exit status: 1) error: `cargo rustc --lib --message-format=json-render-diagnostics --manifest-path src/rust/Cargo.toml --release -v --features pyo3/extension-module --crate-type cdylib -- -C 'link-args=-undefined dynamic_lookup -Wl,-install_name,(a)rpath/_rust.abi3.so'` failed with code 101 *error*: *subprocess-exited-with-error* × Building wheel for cryptography *(*pyproject.toml*)* did not run successfully. │ exit code: *1* ╰─> See above for output. *note*: This error originates from a subprocess, and is likely not a problem with pip. *full command*: /Users/jules/Documents/cryptography/.nox/tests/bin/python /Users/jules/Documents/cryptography/.nox/tests/lib/python3.11/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py build_wheel /var/folders/kp/v9675p5n7tqcvd0472jm5b100000gn/T/tmpi2i1dq_5 *cwd*: /Users/jules/Documents/cryptography Building wheel for cryptography (pyproject.toml) ... error ERROR: Failed building wheel for cryptography Failed to build cryptography

2 8

pyOpenSSL or pyca crytpograhy
by peter cooke Nov. 16, 2023

Nov. 16, 2023

Hi Sorry to bother I am a begginner and confused. I think you guys are the ones making both pyOpenSSL and PYCA cryptography. I was looking at he pyOpenSSL GitHub page and it is saying I should use PYCA cryptogaphty The your web site http://cryptography.io <http://cryptography.io/>. looks like it is saying that I should use pyOpenSSL to make life simple My problem: I need to make an AWS lambda function that unpacks a PKCS12 certificate and uploads to AWS certificate manager. What should I use? pyOpenSSL or PYCA? Why?

2 1