From Pcraghavendra.Prasad at dell.com  Wed Apr  5 10:11:59 2023
From: Pcraghavendra.Prasad at dell.com (Prasad, PCRaghavendra)
Date: Wed, 5 Apr 2023 14:11:59 +0000
Subject: [Cryptography-dev] OpenSSL 3.0.8 + Python 3.11.2 + Cryptography 39
Message-ID: <MN2PR19MB402982D88326D5A2BE15F9519A909@MN2PR19MB4029.namprd19.prod.outlook.com>

Hi Team,

GM,

We are using OpenSSL 1.0.2/python/3.9.16/PyOpenSSL/Cryptography along with FIPS enablement

We are in the process of upgrading OpenSSL from 1.0.2 to OpenSSL 3.0.x (latest) and Python from 3.9.16 to 3.11.2.
As part of the above process, we need to upgrade PyOpenSSL, and Cryptography Python packages as well.

As part of the OpenSSL 3.0.x lot of the API changes are done by the OpenSSL team and only we need to use the High-level APIs.
So one basic doubt is if we upgrade pyOpenSSL and Cryptography to the latest version as these are the wrappers for the underlying OpenSSL, will these packages handle calling the right OpenSSL APIs?

Please let me know your input/thoughts

Thanks,
Raghavendra


Internal Use - Confidential
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.python.org/pipermail/cryptography-dev/attachments/20230405/bbc63a05/attachment.html>

From alex.gaynor at gmail.com  Wed Apr  5 12:03:12 2023
From: alex.gaynor at gmail.com (Alex Gaynor)
Date: Wed, 5 Apr 2023 11:03:12 -0500
Subject: [Cryptography-dev] OpenSSL 3.0.8 + Python 3.11.2 + Cryptography
 39
In-Reply-To: <MN2PR19MB402982D88326D5A2BE15F9519A909@MN2PR19MB4029.namprd19.prod.outlook.com>
References: <MN2PR19MB402982D88326D5A2BE15F9519A909@MN2PR19MB4029.namprd19.prod.outlook.com>
Message-ID: <CAFRnB2WDRbGFec+Eo-zD6hhgwxnRWTeD2Vw4vOFTyqy2_HAfOw@mail.gmail.com>

I'm not positive I understand your question.

That said, cryptography has supported OpenSSL 3.0 since version 35.0,
and pyOpenSSL has required cryptography 35.0.0 since pyOpenSSL 22.

Alex

On Wed, Apr 5, 2023 at 10:58?AM Prasad, PCRaghavendra via
Cryptography-dev <cryptography-dev at python.org> wrote:
>
> Hi Team,
>
>
>
> GM,
>
>
>
> We are using OpenSSL 1.0.2/python/3.9.16/PyOpenSSL/Cryptography along with FIPS enablement
>
>
>
> We are in the process of upgrading OpenSSL from 1.0.2 to OpenSSL 3.0.x (latest) and Python from 3.9.16 to 3.11.2.
>
> As part of the above process, we need to upgrade PyOpenSSL, and Cryptography Python packages as well.
>
>
>
> As part of the OpenSSL 3.0.x lot of the API changes are done by the OpenSSL team and only we need to use the High-level APIs.
>
> So one basic doubt is if we upgrade pyOpenSSL and Cryptography to the latest version as these are the wrappers for the underlying OpenSSL, will these packages handle calling the right OpenSSL APIs?
>
>
>
> Please let me know your input/thoughts
>
>
>
> Thanks,
>
> Raghavendra
>
>
> Internal Use - Confidential
>
> _______________________________________________
> Cryptography-dev mailing list
> Cryptography-dev at python.org
> https://mail.python.org/mailman/listinfo/cryptography-dev



-- 
All that is necessary for evil to succeed is for good people to do nothing.

From paul.l.kehrer at gmail.com  Fri Apr 14 08:36:02 2023
From: paul.l.kehrer at gmail.com (Paul Kehrer)
Date: Fri, 14 Apr 2023 20:36:02 +0800
Subject: [Cryptography-dev] PyCA cryptography 40.0.2 released
Message-ID: <CABj5TKTTYeVQ+hvPYsrP6-z9dKSTu=ioTasdQXQgvss-p2hw=Q@mail.gmail.com>

PyCA cryptography 40.0.2 has been released to PyPI. cryptography
includes both high level recipes and low level interfaces to common
cryptographic algorithms such as symmetric ciphers, asymmetric
algorithms, message digests, X509, key derivation functions, and much
more. We support Python 3.6+, and PyPy3 7.3.10+.

Changelog (https://cryptography.io/en/latest/changelog/#v40-0-2):
* Fixed compilation when using LibreSSL 3.7.2.
* Added some functions to support an upcoming pyOpenSSL release.

-Paul Kehrer (reaperhulk)