Skip to content

Commit b090ad8

Browse files
philipkershawphilipkershaw
authored
Merge pull request #26 from AhsanSheraz/fix/bump-pyopenssl-pyasn1-minimum-versions
fix: bump minimum PyOpenSSL and pyasn1 versions for CVE fixes
2 parents 8d1a446 + 1e9687d commit b090ad8

2 files changed

Lines changed: 19 additions & 15 deletions

File tree

‎README.md‎

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,15 @@
1-
A HTTPS client implementation for
2-
* ``httplib`` (Python 2), ``http.client`` (Python 3) and
3-
* ``urllib2`` (Python 2) and ``urllib`` (Python 3)
1+
A HTTPS client implementation for
2+
* ``http.client`` (Python 3) and
3+
* ``urllib`` (Python 3)
44

5-
... based on PyOpenSSL. PyOpenSSL provides a more fully featured SSL implementation
6-
over the default provided with Python and importantly enables full verification
5+
... based on PyOpenSSL. PyOpenSSL provides a more fully featured SSL implementation
6+
over the default provided with Python and importantly enables full verification
77
of the SSL peer using ``pyasn1``.
88

9+
**Note:** As of this version, Python 2 and Python < 3.8 are no longer supported.
10+
``PyOpenSSL >= 26.0.0`` and ``pyasn1 >= 0.6.3`` are now required to address
11+
CVE-2026-27459 and CVE-2026-30922 respectively.
12+
913
Releases
1014
========
1115
0.5.1
@@ -92,9 +96,7 @@ Initial release
9296

9397
Prerequisites
9498
=============
95-
This has been developed and tested for Python 2.7 with pyOpenSSL 0.13
96-
and 0.14. Version 0.4.0 tested with ``pyOpenSSL`` 0.15.1 and Python 2.7 and
97-
3.4.
99+
Requires Python 3.8 or later, ``PyOpenSSL >= 26.0.0`` and ``pyasn1 >= 0.6.3``.
98100
``pyasn1`` is required for correct SSL verification with ``subjectAltNames``.
99101

100102
Installation

‎setup.py‎

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -31,8 +31,8 @@
3131
'test/pki/ca/*.0'
3232
],
3333
},
34-
install_requires=['PyOpenSSL', 'pyasn1>=0.1.1'],
35-
python_requires='>=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*',
34+
install_requires=['PyOpenSSL>=26.0.0', 'pyasn1>=0.6.3'],
35+
python_requires='>=3.8',
3636
classifiers=[
3737
'Development Status :: 5 - Production/Stable',
3838
'Environment :: Console',
@@ -46,12 +46,14 @@
4646
'Operating System :: Microsoft :: Windows',
4747
'Operating System :: POSIX :: Linux',
4848
'Programming Language :: Python',
49-
'Programming Language :: Python :: 2',
50-
'Programming Language :: Python :: 2.7',
5149
'Programming Language :: Python :: 3',
52-
'Programming Language :: Python :: 3.4',
53-
'Programming Language :: Python :: 3.5',
54-
'Programming Language :: Python :: 3.6',
50+
'Programming Language :: Python :: 3.8',
51+
'Programming Language :: Python :: 3.9',
52+
'Programming Language :: Python :: 3.10',
53+
'Programming Language :: Python :: 3.11',
54+
'Programming Language :: Python :: 3.12',
55+
'Programming Language :: Python :: 3.13',
56+
'Programming Language :: Python :: 3.14',
5557
'Topic :: Security',
5658
'Topic :: Internet',
5759
'Topic :: Scientific/Engineering',

0 commit comments

Comments
 (0)