PyCA cryptography 0.9 released

[Paul Kehrer]

On behalf of all the contributors I am pleased to announce the release of PyCA/cryptography (https://github.com/pyca/cryptography) 0.9!

Changelog:

* Removed support for Python 3.2. This version of Python is rarely used and caused support headaches. Users affected by this should upgrade to 3.3+.
* Deprecated support for Python 2.6. At the time there is no time table for actually dropping support, however we strongly encourage all users to upgrade their Python, as Python 2.6 no longer receives support from the Python core team.
* Add support for the SECP256K1 elliptic curve.
* Fixed compilation when using an OpenSSL which was compiled with the no-comp (OPENSSL_NO_COMP) option.
* Support DER serialization of public keys using the public_bytes method of RSAPublicKeyWithSerialization, DSAPublicKeyWithSerialization, and EllipticCurvePublicKeyWithSerialization.
* Support DER serialization of private keys using the private_bytes method of RSAPrivateKeyWithSerialization, DSAPrivateKeyWithSerialization, and EllipticCurvePrivateKeyWithSerialization.
* Add support for parsing X.509 certificate signing requests (CSRs) with load_pem_x509_csr() and load_der_x509_csr().
* Moved cryptography.exceptions.InvalidToken to cryptography.hazmat.primitives.twofactor.InvalidToken and deprecated the old location. This was moved to minimize confusion between this exception and cryptography.fernet.InvalidToken.
* Added support for X.509 extensions in Certificate objects. The following extensions are supported as of this release:
- BasicConstraints
- AuthorityKeyIdentifier
- SubjectKeyIdentifier
- KeyUsage
- SubjectAlternativeName
- ExtendedKeyUsage
- CRLDistributionPoints
- AuthorityInformationAccess
- CertificatePolicies

Note that unsupported extensions with the critical flag raise UnsupportedExtension while unsupported extensions set to non-critical are silently ignored. Read the X.509 documentation for more information.

You can also view a more attractive version of the changelog here: https://cryptography.io/en/latest/changelog/

Master will be reopening for development of the tenth release shortly.

-Paul Kehrer (reaperhulk)