%global __python3 /usr/bin/python3.12 %global python3_pkgversion 3.12 # RHEL: Tests disabled due to missing deps %bcond_with tests %global srcname cryptography Name: python%{python3_pkgversion}-%{srcname} Version: 41.0.5 Release: 1%{?dist} Summary: PyCA's cryptography library # We bundle various crates with cryptography which is dual licensed # under the ASL 2.0 and BSD-3-Clause, as well as the Python license # for the OS random engine derived by CPython. # Inflector: BSD # aliasable: MIT # asn1: BSD # asn1_derive: BSD # autocfg: MIT or ASL 2.0 # base64: MIT or ASL 2.0 # cfg-if: MIT or ASL 2.0 # chrono: MIT or ASL 2.0 # indoc: MIT or ASL 2.0 # indoc-impl: MIT or ASL 2.0 # instant: BSD # lazy_static: MIT or ASL 2.0 # libc: MIT or ASL 2.0 # lock_api: MIT or ASL 2.0 # num-integer: MIT or ASL 2.0 # num-traits: MIT or ASL 2.0 # once_cell: MIT or ASL 2.0 # ouroboros: MIT or ASL 2.0 # ouroboros_macro: MIT or ASL 2.0 # parking_lot: MIT or ASL 2.0 # parking_lot_core: MIT or ASL 2.0 # paste: MIT or ASL 2.0 # paste-impl: MIT or ASL 2.0 # pem: MIT # proc-macro-error: MIT or ASL 2.0 # proc-macro-error-attr: MIT or ASL 2.0 # proc-macro-hack: MIT or ASL 2.0 # proc-macro2: MIT or ASL 2.0 # pyo3: ASL 2.0 # pyo3-build-config: ASL 2.0 # pyo3-macros: ASL 2.0 # pyo3-macros-backend: ASL 2.0 # quote: MIT or ASL 2.0 # scopeguard: MIT or ASL 2.0 # smallvec: MIT or ASL 2.0 # stable_deref_trait: MIT or ASL 2.0 # syn: MIT or ASL 2.0 # unicode-xid: MIT or ASL 2.0 # unindent: MIT or ASL 2.0 # version_check: MIT or ASL 2.0 License: (ASL 2.0 or BSD) and Python and BSD and MIT and (MIT or ASL 2.0) and ASL 2.0 URL: https://cryptography.io/en/latest/ Source0: https://github.com/pyca/cryptography/archive/%{version}/%{srcname}-%{version}.tar.gz # created by ./vendor_rust.py helper script Source1: cryptography-%{version}-vendor.tar.bz2 Source2: conftest-skipper.py Patch1: pyo3-0.19.patch Patch2: ouroboros-0.17.patch ExclusiveArch: %{rust_arches} BuildRequires: openssl-devel BuildRequires: gcc BuildRequires: gnupg2 %if 0%{?fedora} BuildRequires: rust-packaging # test_load_with_other_sections in 40.0 fails with pem 1.1.0 BuildRequires: rust-pem-devel >= 1.1.1 %else BuildRequires: rust-toolset %endif BuildRequires: python%{python3_pkgversion}-cffi >= 1.12 BuildRequires: python%{python3_pkgversion}-devel BuildRequires: python%{python3_pkgversion}-rpm-macros BuildRequires: python%{python3_pkgversion}-setuptools BuildRequires: python%{python3_pkgversion}-setuptools-rust >= 0.11.4 %if %{with tests} %if 0%{?fedora} BuildRequires: python%{python3_pkgversion}-hypothesis >= 1.11.4 BuildRequires: python%{python3_pkgversion}-iso8601 BuildRequires: python%{python3_pkgversion}-pretend BuildRequires: python%{python3_pkgversion}-pytest-xdist BuildRequires: python%{python3_pkgversion}-pytz %endif BuildRequires: python%{python3_pkgversion}-pytest >= 6.2.0 BuildRequires: python%{python3_pkgversion}-pytest-benchmark BuildRequires: python%{python3_pkgversion}-pytest-subtests >= 0.5.0 %endif Requires: openssl-libs Requires: python%{python3_pkgversion}-cffi >= 1.7 # Provides for the bundled crates Provides: bundled(crate(Inflector)) = 0.11.4 Provides: bundled(crate(aliasable)) = 0.1.3 Provides: bundled(crate(asn1)) = 0.8.7 Provides: bundled(crate(asn1_derive)) = 0.8.7 Provides: bundled(crate(autocfg)) = 1.1.0 Provides: bundled(crate(base64)) = 0.13.0 Provides: bundled(crate(cfg-if)) = 1.0.0 Provides: bundled(crate(chrono)) = 0.4.19 Provides: bundled(crate(indoc)) = 0.3.6 Provides: bundled(crate(indoc-impl)) = 0.3.6 Provides: bundled(crate(instant)) = 0.1.12 Provides: bundled(crate(lazy_static)) = 1.4.0 Provides: bundled(crate(libc)) = 0.2.124 Provides: bundled(crate(lock_api)) = 0.4.7 Provides: bundled(crate(num-integer)) = 0.1.44 Provides: bundled(crate(num-traits)) = 0.2.14 Provides: bundled(crate(once_cell)) = 1.10.0 Provides: bundled(crate(ouroboros)) = 0.15.0 Provides: bundled(crate(ouroboros_macro)) = 0.15.0 Provides: bundled(crate(parking_lot)) = 0.11.2 Provides: bundled(crate(parking_lot_core)) = 0.8.5 Provides: bundled(crate(paste)) = 0.1.18 Provides: bundled(crate(paste-impl)) = 0.1.18 Provides: bundled(crate(pem)) = 1.0.2 Provides: bundled(crate(proc-macro-error)) = 1.0.4 Provides: bundled(crate(proc-macro-error-attr)) = 1.0.4 Provides: bundled(crate(proc-macro-hack)) = 0.5.19 Provides: bundled(crate(proc-macro2)) = 1.0.37 Provides: bundled(crate(pyo3)) = 0.15.2 Provides: bundled(crate(pyo3-build-config)) = 0.15.2 Provides: bundled(crate(pyo3-macros)) = 0.15.2 Provides: bundled(crate(pyo3-macros-backend)) = 0.15.2 Provides: bundled(crate(quote)) = 1.0.18 Provides: bundled(crate(scopeguard)) = 1.1.0 Provides: bundled(crate(smallvec)) = 1.8.0 Provides: bundled(crate(stable_deref_trait)) = 1.2.0 Provides: bundled(crate(syn)) = 1.0.91 Provides: bundled(crate(unicode-xid)) = 0.2.2 Provides: bundled(crate(unindent)) = 0.1.8 Provides: bundled(crate(version_check)) = 0.9.4 # Cryptography crate Provides: crate(cryptography-rust) = 0.1.0 %description cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. %prep %autosetup -p1 -N -n %{srcname}-%{version} %if 0%{?fedora} # patch pyo3 and ouroboros depedency %autopatch -p1 1 %autopatch -p1 2 %cargo_prep rm src/rust/Cargo.lock %else # RHEL: use vendored Rust crates %cargo_prep -V 1 %endif %if 0%{?fedora} %generate_buildrequires # Fedora: use RPMified crates cd src/rust %cargo_generate_buildrequires cd ../.. %endif # Remove cosmetical pytest-subtests 0.10.0 option sed -i 's,--no-subtests-shortletter,,' pyproject.toml %build export OPENSSL_NO_VENDOR=1 %py3_build %install # Actually other *.c and *.h are appropriate # see https://github.com/pyca/cryptography/issues/1463 find . -name .keep -print -delete %py3_install %check %if %{with tests} %if 0%{?rhel} # skip hypothesis and pytz tests on RHEL rm -rf tests/hypothesis tests/x509 # append skipper to skip iso8601 and pretend tests cat < %{SOURCE2} >> tests/conftest.py %endif # enable SHA-1 signatures for RSA tests # also see https://github.com/pyca/cryptography/pull/6931 and rhbz#2060343 export OPENSSL_ENABLE_SHA1_SIGNATURES=yes # see https://github.com/pyca/cryptography/issues/4885 and # see https://bugzilla.redhat.com/show_bug.cgi?id=1761194 for deselected tests # see rhbz#2042413 for memleak. It's unstable under Python 3.11 and makes # not much sense for downstream testing. # see rhbz#2171661 for test_load_invalid_ec_key_from_pem: error:030000CD:digital envelope routines::keymgmt export failure PYTHONPATH=${PWD}/vectors:%{buildroot}%{python3_sitearch} \ %{__python3} -m pytest \ --ignore vendor \ -k "not (test_buffer_protocol_alternate_modes or test_dh_parameters_supported or test_load_ecdsa_no_named_curve or test_decrypt_invalid_decrypt or test_openssl_memleak or test_load_invalid_ec_key_from_pem)" %endif %files -n python%{python3_pkgversion}-%{srcname} %doc README.rst docs %license LICENSE LICENSE.APACHE LICENSE.BSD %{python3_sitearch}/%{srcname} %{python3_sitearch}/%{srcname}-%{version}-py*.egg-info %changelog * Thu Oct 26 2023 Christian Heimes - 41.0.5-1 - Update to 41.0.5, resolves RHBZ#2239707 * Mon Aug 14 2023 Christian Heimes - 41.0.3-2 - Build with ouroboros 0.17, fixes rhbz#2214228 / RUSTSEC-2023-0042 * Wed Aug 09 2023 Christian Heimes - 41.0.3-1 - Update to 41.0.3, resolves rhbz#2211237 - Use pyo3 0.19 * Fri Jul 21 2023 Fedora Release Engineering - 40.0.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Mon Jul 10 2023 Python Maint - 40.0.2-4 - Rebuilt for Python 3.12 * Wed Jun 14 2023 Python Maint - 40.0.2-3 - Bootstrap for Python 3.12 * Tue Jun 13 2023 Yaakov Selkowitz - 40.0.2-2 - Use vendored rust-pem in RHEL builds * Tue Apr 18 2023 Christian Heimes - 40.0.2-1 - Update to 40.0.2, resolves rhbz#2181430 * Thu Mar 09 2023 Miro Hrončok - 39.0.2-2 - Don't run tests requiring pytz on RHEL - Don't try to run tests of vendored dependencies in %%check * Sat Mar 04 2023 Christian Heimes - 39.0.2-1 - Update to 39.0.2, resolves rhbz#2124729 * Tue Feb 28 2023 Fabio Valentini - 37.0.2-9 - Ensure correct compiler flags are used for Rust code. * Wed Feb 22 2023 Christian Heimes - 37.0.2-8 - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2171820 - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt, resolves rhbz#2171661 * Fri Jan 20 2023 Fedora Release Engineering - 37.0.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Dec 09 2022 Christian Heimes - 37.0.2-6 - Enable SHA1 signatures in test suite (ELN-only) * Wed Aug 17 2022 Miro Hrončok - 37.0.2-5 - Drop unused requirement of python3-six * Fri Jul 22 2022 Fedora Release Engineering - 37.0.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jun 14 2022 Python Maint - 37.0.2-3 - Rebuilt for Python 3.11 * Tue Jun 14 2022 Python Maint - 37.0.2-2 - Bootstrap for Python 3.11 * Thu May 05 2022 Christian Heimes - 37.0.2-1 - Update to 37.0.2, resolves rhbz#2078968 * Thu Jan 27 2022 Christian Heimes - 36.0.0-3 - Skip unstable memleak tests, resolves: RHBZ#2042413 * Fri Jan 21 2022 Fedora Release Engineering - 36.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Nov 22 2021 Christian Heimes - 36.0.0-1 - Update to 36.0.0, fixes RHBZ#2025347 * Thu Sep 30 2021 Christian Heimes - 35.0.0-2 - Require rust-asn1 >= 0.6.4 * Thu Sep 30 2021 Christian Heimes - 35.0-1 - Update to 35.0.0 (#2009117) * Tue Sep 14 2021 Sahana Prasad - 3.4.7-6 - Rebuilt with OpenSSL 3.0.0 * Fri Jul 23 2021 Fedora Release Engineering - 3.4.7-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Thu Jun 10 2021 Stephen Gallagher - 3.4.7-4 - Don't conditionalize Source: directives * Wed Jun 02 2021 Python Maint - 3.4.7-3 - Rebuilt for Python 3.10 * Tue May 11 2021 Christian Heimes - 3.4.7-2 - Fix compatibility issue with Python 3.10. Enums now use same representation as on Python 3.9. (#1952522) - Backport OpenSSL 3.0.0 compatibility patches. * Wed Apr 21 2021 Christian Heimes - 3.4.7-1 - Update to 3.4.7 - Remove dependency on python-cryptography-vectors package and use vectors directly from Github source tar ball. (#1952024) * Wed Mar 03 2021 Christian Heimes - 3.4.6-1 - Update to 3.4.6 (#1927044) * Mon Feb 15 2021 Christian Heimes - 3.4.5-1 - Update to 3.4.5 (#1927044) * Fri Feb 12 2021 Christian Heimes - 3.4.4-3 - Skip iso8601 and pretend tests on RHEL * Fri Feb 12 2021 Christian Heimes - 3.4.4-2 - Provide RHEL build infrastructure * Wed Feb 10 2021 Christian Heimes - 3.4.4-1 - Update to 3.4.4 (#1927044) * Mon Feb 08 2021 Christian Heimes - 3.4.2-1 - Update to 3.4.2 (#1926339) - Package no longer depends on Rust (#1926181) * Mon Feb 08 2021 Fabio Valentini - 3.4.1-2 - Use dynamically generated BuildRequires for PyO3 Rust module. - Drop unnecessary CARGO_NET_OFFLINE environment variable. * Sun Feb 07 2021 Christian Heimes - 3.4.1-1 - Update to 3.4.1 (#1925953) * Sun Feb 07 2021 Christian Heimes - 3.4-2 - Add missing abi3 and pytest dependencies * Sun Feb 07 2021 Christian Heimes - 3.4-1 - Update to 3.4 (#1925953) - Remove Python 2 support - Remove unused python-idna dependency - Add Rust support * Wed Jan 27 2021 Fedora Release Engineering - 3.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Thu Dec 10 2020 Christian Heimes - 3.3.1-1 - Update to 3.3.1 (#1905756) * Wed Oct 28 2020 Christian Heimes - 3.2.1-1 - Update to 3.2.1 (#1892153) * Mon Oct 26 2020 Christian Heimes - 3.2-1 - Update to 3.2 (#1891378) * Mon Sep 07 2020 Christian Heimes - 3.1-1 - Update to 3.1 (#1872978) * Wed Jul 29 2020 Fedora Release Engineering - 3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 21 2020 Christian Heimes - 3.0-1 - Update to 3.0 (#185897) * Sat May 23 2020 Miro Hrončok - 2.9-3 - Rebuilt for Python 3.9 * Tue May 12 2020 Felix Schwarz - 2.9-2 - add source file verification * Fri Apr 03 2020 Christian Heimes - 2.9-1 - Update to 2.9 (#1820348) * Thu Jan 30 2020 Fedora Release Engineering - 2.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Jan 13 2020 Christian Heimes - 2.8-2 - cryptography 2.8+ no longer depends on python-asn1crypto * Thu Oct 17 2019 Christian Heimes - 2.8-1 - Update to 2.8 - Resolves: rhbz#1762779 * Sun Oct 13 2019 Christian Heimes - 2.7-3 - Skip unit tests that fail with OpenSSL 1.1.1.d - Resolves: rhbz#1761194 - Fix and simplify Python 3 packaging * Sat Oct 12 2019 Christian Heimes - 2.7-2 - Drop Python 2 package - Resolves: rhbz#1761081 * Tue Sep 03 2019 Randy Barlow - 2.7-1 - Update to 2.7 (#1715680). * Fri Aug 16 2019 Miro Hrončok - 2.6.1-3 - Rebuilt for Python 3.8 * Fri Jul 26 2019 Fedora Release Engineering - 2.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Feb 28 2019 Christian Heimes - 2.6.1-1 - New upstream release 2.6.1, resolves RHBZ#1683691 * Wed Feb 13 2019 Alfredo Moralejo - 2.5-1 - Updated to 2.5. * Sat Feb 02 2019 Fedora Release Engineering - 2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Aug 13 2018 Christian Heimes - 2.3-2 - Use TLSv1.2 in test as workaround for RHBZ#1615143 * Wed Jul 18 2018 Christian Heimes - 2.3-1 - New upstream release 2.3 - Fix AEAD tag truncation bug, RHBZ#1602752 * Fri Jul 13 2018 Fedora Release Engineering - 2.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Jun 15 2018 Miro Hrončok - 2.2.1-2 - Rebuilt for Python 3.7 * Wed Mar 21 2018 Christian Heimes - 2.2.1-1 - New upstream release 2.2.1 * Sun Feb 18 2018 Christian Heimes - 2.1.4-1 - New upstream release 2.1.4 * Sun Feb 18 2018 Christian Heimes - 2.1.3-4 - Build requires gcc * Mon Feb 12 2018 Iryna Shcherbina - 2.1.3-3 - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) * Fri Feb 09 2018 Fedora Release Engineering - 2.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild