From 416f4a1d5cfd3c76736ebd68f33c4f76af27568b Mon Sep 17 00:00:00 2001 From: Fedor Brunner Date: Fri, 28 Mar 2014 13:18:38 +0100 Subject: Added dependency for cryptography>=0.3. Test split into multiple methods. Added changelog entry. If you use these methods to implement TLS channel binding (RFC 5929) disable session resumption because triple handshake attacks against TLS. https://www.ietf.org/mail-archive/web/tls/current/msg11337.html https://secure-resumption.com/tlsauth.pdf --- setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'setup.py') diff --git a/setup.py b/setup.py index 058ad7b..f12714d 100755 --- a/setup.py +++ b/setup.py @@ -34,7 +34,7 @@ setup(name='pyOpenSSL', version=__version__, maintainer_email = 'exarkun@twistedmatrix.com', url = 'https://github.com/pyca/pyopenssl', license = 'APL2', - install_requires=["cryptography>=0.2.1", "six>=1.5.2"], + install_requires=["cryptography>=0.3", "six>=1.5.2"], long_description = """\ High-level wrapper around a subset of the OpenSSL library, includes * SSL.Connection objects, wrapping the methods of Python's portable -- cgit v1.2.1