summaryrefslogtreecommitdiff
path: root/setup.cfg
Commit message (Collapse)AuthorAgeFilesLines
* Use the files API instead of path from importlib.resourcesIvan Kanakarakis2021-10-191-1/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Use importlib.resources in python >= 3.7Alfredo Moralejo2021-10-111-1/+1
| | | | | | | | importlib.resources was added to python standard library since python 3.7 [1]. This patch is implementing conditional to use it instead of the importlib_resources backport when using python 3.7 or newer. [1] https://docs.python.org/3/whatsnew/3.7.html
* specify minimum version needed for xmlschemaJan Zerebecki2021-01-291-1/+1
| | | | | Sandbox mode was adding in 1.2.0 of python-xmlschema and refined in 1.2.1. Its use was added in 3b707723dcf1bf60677b424aac398c0c3557641d.
* Fix CVE-2021-21238 - SAML XML Signature wrappingIvan Kanakarakis2021-01-151-0/+1
| | | | | | | | | | | | | | | | | | All users of pysaml2 that use the default `CryptoBackendXmlSec1` backend and need to verify signed SAML documents are impacted. `pysaml2 <= 6.4.1` does not validate the SAML document against an XML schema. This allows invalid XML documents to trick the verification process, by presenting elements with a valid signature inside elements whose content has been malformed. The verification is offloaded to `xmlsec1` and `xmlsec1` will not validate every signature in the given document, but only the first it finds in the given scope. Credits for the report: - Victor Schönfelder Garcia (isits AG International School of IT Security) - Juraj Somorovsky (Paderborn University) - Vladislav Mladenov (Ruhr University Bochum) Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add xsd schemasIvan Kanakarakis2021-01-151-0/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Load the encryption template using package resourcesIvan Kanakarakis2021-01-071-0/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add python runtime specifier requirementIvan Kanakarakis2020-12-081-0/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add Python 3.8 as supportedGábor Lipták2020-04-281-0/+1
|
* Declare pytest markers properlyIvan Kanakarakis2019-12-261-0/+5
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Remove python2 support markers and checksIvan Kanakarakis2019-11-261-6/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Remove the python-future module and use sixIvan Kanakarakis2018-12-061-1/+0
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Conform to black defaultsIvan Kanakarakis2018-11-191-2/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Specify minimal version for cryptography packageVictor Mireyev2018-08-011-1/+1
| | | | Otherwise if pysaml is installed with an older release of cryptography package it would fail with AttributeError: '_RSAPrivateKey' object has no attribute 'sign'
* Switch from setup.py to setup.cfgIvan Kanakarakis2018-07-031-0/+102
A bug is blocking setuptools from working with python2 [bug]. Work is on its way [pr]. Until that is fixed, package_dir should be defined in setup.py to preserve compatibility of the native str type. [bug]: https://github.com/pypa/setuptools/issues/1136 [pr]: https://github.com/pypa/setuptools/pull/1180 Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>