Hide Forgot
Rebase python-cryptography from 1.3.1 (RHEL 7.3) to 1.7. Version 1.7 hasn't been released yet. It's scheduled to be released in about two weeks (early December). The new version will contain two important fixes and a new feature for FreeIPA 4.5. 1.7 improvements: * new osrandom engine in C (fix for SELinux execmem denials, fix for deadlock and segfaults in mod_wsgi subinterpreters) https://github.com/pyca/cryptography/pull/3229 1.6 improvements: * new locking code in C (fixes same class of issues as osrandom engine) https://github.com/pyca/cryptography/pull/3226 * support for multi-valued RDNs https://github.com/pyca/cryptography/issues/3199
Tests are expected to be primarily SanityOnly, by testing IdM use cases only.
cryptography 1.7.1 was released a couple of hours ago, https://github.com/pyca/cryptography/releases/tag/1.7.1 1.7.1 has caused a regression in PyOpenSSL, https://github.com/pyca/cryptography/pull/3321 . I'm expecting to see a 1.7.2 release in a matter of days.
https://github.com/pyca/cryptography/pull/3321 affects only 1.8-dev. 1.7.1 is good to go.
We might want to wait for release 1.8 to get the fix for https://github.com/pyca/cryptography/pull/3382 . The PR replaces the last use of cffi callbacks in cryptography and fixes an issue with password protected private keys.
Verified using IPA version :: ipa-server-4.5.0-13.el7.x86_64 Quickinstall and other sanity testcases verifies the status of correct version of Python2-cryptography # rpm -qa ipa-server python2-cryptography ipa-server-4.5.0-13.el7.x86_64 python2-cryptography-1.7.2-1.el7.x86_64 Marking BZ as verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:2122