feat: update python-cryptography to 43.0.0-2

.gitattributes

@@ -0,0 +1 @@
+*.pem text eol=lf

.gitignore

@@ -0,0 +1,18 @@
+__pycache__/
+_build/
+build/
+dist/
+htmlcov/
+*.so
+.tox/
+.cache/
+.coverage
+*.egg-info/
+*.egg
+.eggs/
+*.py[cdo]
+.hypothesis/
+target/
+.rust-cov/
+*.lcov
+*.profdata

LICENSE

@@ -1,6 +1,3 @@
 This software is made available under the terms of *either* of the licenses
 found in LICENSE.APACHE or LICENSE.BSD. Contributions to cryptography are made
 under the terms of *both* these licenses.
-
-The code used in the OS random engine is derived from CPython, and is licensed
-under the terms of the PSF License Agreement.

PKG-INFO

@@ -1,16 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.3
 Name: cryptography
-Version: 38.0.4
-Summary: cryptography is a package which provides cryptographic recipes and primitives to Python developers.
-Home-page: https://github.com/pyca/cryptography
-Author: The Python Cryptographic Authority and individual contributors
-Author-email: cryptography-dev@python.org
-License: BSD-3-Clause OR Apache-2.0
-Project-URL: Documentation, https://cryptography.io/
-Project-URL: Source, https://github.com/pyca/cryptography/
-Project-URL: Issues, https://github.com/pyca/cryptography/issues
-Project-URL: Changelog, https://cryptography.io/en/latest/changelog/
-Platform: UNKNOWN
+Version: 43.0.0
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: Apache Software License
@@ -24,26 +14,58 @@ Classifier: Operating System :: Microsoft :: Windows
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
-Classifier: Programming Language :: Python :: 3.6
 Classifier: Programming Language :: Python :: 3.7
 Classifier: Programming Language :: Python :: 3.8
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: Implementation :: PyPy
 Classifier: Topic :: Security :: Cryptography
-Requires-Python: >=3.6
-Description-Content-Type: text/x-rst
+Requires-Dist: cffi >=1.12 ; platform_python_implementation != 'PyPy'
+Requires-Dist: bcrypt >=3.1.5 ; extra == 'ssh'
+Requires-Dist: nox ; extra == 'nox'
+Requires-Dist: cryptography-vectors ==43.0.0 ; extra == 'test'
+Requires-Dist: pytest >=6.2.0 ; extra == 'test'
+Requires-Dist: pytest-benchmark ; extra == 'test'
+Requires-Dist: pytest-cov ; extra == 'test'
+Requires-Dist: pytest-xdist ; extra == 'test'
+Requires-Dist: pretend ; extra == 'test'
+Requires-Dist: certifi ; extra == 'test'
+Requires-Dist: pytest-randomly ; extra == 'test-randomorder'
+Requires-Dist: sphinx >=5.3.0 ; extra == 'docs'
+Requires-Dist: sphinx-rtd-theme >=1.1.1 ; extra == 'docs'
+Requires-Dist: pyenchant >=1.6.11 ; extra == 'docstest'
+Requires-Dist: readme-renderer ; extra == 'docstest'
+Requires-Dist: sphinxcontrib-spelling >=4.0.1 ; extra == 'docstest'
+Requires-Dist: build ; extra == 'sdist'
+Requires-Dist: ruff ; extra == 'pep8test'
+Requires-Dist: mypy ; extra == 'pep8test'
+Requires-Dist: check-sdist ; extra == 'pep8test'
+Requires-Dist: click ; extra == 'pep8test'
+Provides-Extra: ssh
+Provides-Extra: nox
 Provides-Extra: test
+Provides-Extra: test-randomorder
 Provides-Extra: docs
 Provides-Extra: docstest
 Provides-Extra: sdist
 Provides-Extra: pep8test
-Provides-Extra: ssh
 License-File: LICENSE
 License-File: LICENSE.APACHE
 License-File: LICENSE.BSD
-License-File: LICENSE.PSF
+Summary: cryptography is a package which provides cryptographic recipes and primitives to Python developers.
+Author: The cryptography developers <cryptography-dev@python.org>
+Author-email: The Python Cryptographic Authority and individual contributors <cryptography-dev@python.org>
+License: Apache-2.0 OR BSD-3-Clause
+Requires-Python: >=3.7
+Description-Content-Type: text/x-rst; charset=UTF-8
+Project-URL: homepage, https://github.com/pyca/cryptography
+Project-URL: documentation, https://cryptography.io/
+Project-URL: source, https://github.com/pyca/cryptography/
+Project-URL: issues, https://github.com/pyca/cryptography/issues
+Project-URL: changelog, https://cryptography.io/en/latest/changelog/
 
 pyca/cryptography
 =================
@@ -61,8 +83,8 @@ pyca/cryptography
 
 
 ``cryptography`` is a package which provides cryptographic recipes and
-primitives to Python developers.  Our goal is for it to be your "cryptographic
-standard library". It supports Python 3.6+ and PyPy3 7.2+.
+primitives to Python developers. Our goal is for it to be your "cryptographic
+standard library". It supports Python 3.7+ and PyPy3 7.3.11+.
 
 ``cryptography`` includes both high level recipes and low level interfaces to
 common cryptographic algorithms such as symmetric ciphers, message digests, and
@@ -77,9 +99,9 @@ key derivation functions. For example, to encrypt something with
     >>> f = Fernet(key)
     >>> token = f.encrypt(b"A really secret message. Not for prying eyes.")
     >>> token
-    '...'
+    b'...'
     >>> f.decrypt(token)
-    'A really secret message. Not for prying eyes.'
+    b'A really secret message. Not for prying eyes.'
 
 You can find more information in the `documentation`_.
 
@@ -114,4 +136,3 @@ documentation.
 .. _`cryptography-dev`: https://mail.python.org/mailman/listinfo/cryptography-dev
 .. _`security reporting`: https://cryptography.io/en/latest/security/
 
-

README.rst

@@ -14,8 +14,8 @@ pyca/cryptography
 
 
 ``cryptography`` is a package which provides cryptographic recipes and
-primitives to Python developers.  Our goal is for it to be your "cryptographic
-standard library". It supports Python 3.6+ and PyPy3 7.2+.
+primitives to Python developers. Our goal is for it to be your "cryptographic
+standard library". It supports Python 3.7+ and PyPy3 7.3.11+.
 
 ``cryptography`` includes both high level recipes and low level interfaces to
 common cryptographic algorithms such as symmetric ciphers, message digests, and
@@ -30,9 +30,9 @@ key derivation functions. For example, to encrypt something with
     >>> f = Fernet(key)
     >>> token = f.encrypt(b"A really secret message. Not for prying eyes.")
     >>> token
-    '...'
+    b'...'
     >>> f.decrypt(token)
-    'A really secret message. Not for prying eyes.'
+    b'A really secret message. Not for prying eyes.'
 
 You can find more information in the `documentation`_.
 

debian/changelog

@@ -1,3 +1,134 @@
+python-cryptography (43.0.0-2) unstable; urgency=medium
+
+  * Restore B-D: python3-setuptools (Closes: #1100262).
+  * Update to librust-asn1-0.20-dev, add upstream patches for compatibility
+    with it (Closes: #1101438).
+  * Disable DH_VERBOSE.
+
+ -- Andrey Rakhmatullin <wrar@debian.org>  Sat, 29 Mar 2025 01:20:16 +0500
+
+python-cryptography (43.0.0-1) unstable; urgency=medium
+
+  * New upstream version.
+  * Update and rearrange Build-Depends:
+    + Removed:
+      - librust-asn1-derive-0.15-dev (obsolete)
+      - librust-ouroboros-0.15-dev (obsolete)
+      - librust-paste-dev (obsolete)
+      - librust-pyo3-macros-0.20-dev (not an explicit dep)
+      - python3-hypothesis (obsolete)
+      - python3-iso8601 (obsolete)
+      - python3-pytest-subtests (obsolete)
+      - python3-setuptools (changed in this version)
+      - python3-setuptools-rust (changed in this version)
+      - python3-tz (obsolete)
+      - tzdata (obsolete)
+    + Added:
+      - librust-cc-1.1-dev (forgotten explicit dep)
+      - librust-foreign-types-0.3-dev (forgotten explicit dep)
+      - python3-bcrypt (optional dep)
+      - python3-certifi (forgotten explicit dep; fixes building with nodoc)
+      - python3-maturin (changed in this version)
+    + Moved to Build-Depends-Indep:
+      - dh-sequence-sphinxdoc
+      - python3-doc
+      - python3-sphinx
+      - python3-sphinx-rtd-theme
+    + Version updates (Closes: #1080395):
+      - librust-asn1-0.17-dev (from 0.15)
+      - librust-pyo3-0.22-dev (from 0.20)
+      - librust-pyo3-0.22+default-dev (from 0.20)
+  * Change upstream version reqs to ones provided by Debian:
+    + asn1 0.16.2 -> 0.17.0
+    + openssl 0.10.65 -> 0.10.63
+    + openssl-sys 0.9.103 -> 0.9.101
+  * Skip tests that fail with librust-openssl-dev < 0.10.65.
+  * Add python3-bcrypt to Depends.
+  * Move documentation build-deps into Build-Depends-Indep.
+  * Bump Standards-Version to 4.7.0.
+
+ -- Andrey Rakhmatullin <wrar@debian.org>  Tue, 10 Sep 2024 23:55:34 +0500
+
+python-cryptography (42.0.5-2) unstable; urgency=medium
+
+  * Patch: upstream fix for 32-bit archs tests
+
+ -- Jérémy Lal <kapouer@melix.org>  Tue, 19 Mar 2024 23:15:50 +0100
+
+python-cryptography (42.0.5-1) unstable; urgency=medium
+
+  * Team upload.
+  * Bump setuptools-rust, rust-pem, rust-openssl, rust-openssl-sys deps
+  * Testsuite: autopkgtest-pkg-pybuild
+
+  [ Andreas Tille ]
+  * New upstream version
+    Closes: #1059308 (CVE-2023-50782)
+    Closes: #1064778 (CVE-2024-26130)
+    Closes: #1063771, #1018159
+  * watch file standard 4 (routine-update)
+    Closes: #1046569
+
+  [ Michael R. Crusoe ]
+  * Reorder sequence of d/control fields by cme (routine-update)
+  * d/{tests/,}control: update dependency on python3-cryptography-vectors
+  * marked intersphinx patch as not needing forwarding
+
+  [ Andrey Rakhmatullin ]
+  * Add myself to Uploaders.
+
+  [ Jérémy Lal ]
+  * Testsuite: autopkgtest-pkg-pybuild
+
+ -- Jérémy Lal <kapouer@melix.org>  Tue, 19 Mar 2024 10:58:04 +0100
+
+python-cryptography (41.0.7-5) unstable; urgency=medium
+
+  * AMAU, Closes: #1064979
+
+  [ Andreas Tille ]
+  * Enable building twice in a row
+
+ -- Jérémy Lal <kapouer@melix.org>  Thu, 07 Mar 2024 13:42:35 +0100
+
+python-cryptography (41.0.7-4) unstable; urgency=medium
+
+  * orphan
+
+ -- Sandro Tosi <morph@debian.org>  Wed, 28 Feb 2024 12:23:58 -0500
+
+python-cryptography (41.0.7-3) unstable; urgency=medium
+
+  * Upgrade to pyo3 0.20. Closes: #1063365
+
+ -- Jérémy Lal <kapouer@melix.org>  Thu, 08 Feb 2024 15:34:30 +0100
+
+python-cryptography (41.0.7-2) unstable; urgency=medium
+
+  * patch: drop pem 1.0 workaround, depends pem 1.1. Closes: 1060294.
+  * autopkgtest: fix version of cryptography-vectors
+
+ -- Jérémy Lal <kapouer@melix.org>  Tue, 09 Jan 2024 01:14:48 +0100
+
+python-cryptography (41.0.7-1) unstable; urgency=medium
+
+  * Team upload
+  * New upstream version 41.0.7
+  * patch: remove n/a, disable a test to keep building with pem 1.0
+  * Update deps
+  * Bump Standards-Version
+
+  [ Sandro Tosi ]
+  * New upstream release; Closes: #1031049
+    - fixes CVE-2023-23931
+  * debian/watch
+    - remove pgpsigurlmangle, .asc file no longer on PyPI
+
+  [ Nicolas Dandrimont ]
+  * New upstream version 41.0.3
+
+ -- Jérémy Lal <kapouer@melix.org>  Sun, 07 Jan 2024 13:24:39 +0100
+
 python-cryptography (38.0.4-4) unstable; urgency=medium
 
   * Team Upload.