summaryrefslogtreecommitdiff
path: root/setup.cfg
Commit message (Collapse)AuthorAgeFilesLines
* Fix CVE-2021-21238 - SAML XML Signature wrappingIvan Kanakarakis2021-01-151-0/+1
| | | | | | | | | | | | | | | | | | All users of pysaml2 that use the default `CryptoBackendXmlSec1` backend and need to verify signed SAML documents are impacted. `pysaml2 <= 6.4.1` does not validate the SAML document against an XML schema. This allows invalid XML documents to trick the verification process, by presenting elements with a valid signature inside elements whose content has been malformed. The verification is offloaded to `xmlsec1` and `xmlsec1` will not validate every signature in the given document, but only the first it finds in the given scope. Credits for the report: - Victor Schönfelder Garcia (isits AG International School of IT Security) - Juraj Somorovsky (Paderborn University) - Vladislav Mladenov (Ruhr University Bochum) Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add xsd schemasIvan Kanakarakis2021-01-151-0/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Load the encryption template using package resourcesIvan Kanakarakis2021-01-071-0/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add python runtime specifier requirementIvan Kanakarakis2020-12-081-0/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add Python 3.8 as supportedGábor Lipták2020-04-281-0/+1
|
* Declare pytest markers properlyIvan Kanakarakis2019-12-261-0/+5
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Remove python2 support markers and checksIvan Kanakarakis2019-11-261-6/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Remove the python-future module and use sixIvan Kanakarakis2018-12-061-1/+0
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Conform to black defaultsIvan Kanakarakis2018-11-191-2/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Specify minimal version for cryptography packageVictor Mireyev2018-08-011-1/+1
| | | | Otherwise if pysaml is installed with an older release of cryptography package it would fail with AttributeError: '_RSAPrivateKey' object has no attribute 'sign'
* Switch from setup.py to setup.cfgIvan Kanakarakis2018-07-031-0/+102
A bug is blocking setuptools from working with python2 [bug]. Work is on its way [pr]. Until that is fixed, package_dir should be defined in setup.py to preserve compatibility of the native str type. [bug]: https://github.com/pypa/setuptools/issues/1136 [pr]: https://github.com/pypa/setuptools/pull/1180 Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
View Lorry Controller Status