From 7992fc197332d4c7f93f55403f077cdfd5df11a0 Mon Sep 17 00:00:00 2001 From: Felix Yan Date: Wed, 14 Oct 2020 23:25:16 +0800 Subject: [PATCH 1/4] Correct a typo in subj_alt_name.py --- ndg/httpsclient/subj_alt_name.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ndg/httpsclient/subj_alt_name.py b/ndg/httpsclient/subj_alt_name.py index 7cc3f47..7c195aa 100644 --- a/ndg/httpsclient/subj_alt_name.py +++ b/ndg/httpsclient/subj_alt_name.py @@ -69,7 +69,7 @@ class AttributeTypeAndValue(univ.Sequence): class RelativeDistinguishedName(univ.SetOf): - '''ASN.1 Realtive distinguished name''' + '''ASN.1 Relative distinguished name''' componentType = AttributeTypeAndValue() class RDNSequence(univ.SequenceOf): From 4005b64a9d4bf5b60a99e11174c75e8c00400ee0 Mon Sep 17 00:00:00 2001 From: Christian Clauss Date: Wed, 17 Mar 2021 20:04:55 +0100 Subject: [PATCH 2/4] Travis CI: Test on current versions of CPython --- .travis.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.travis.yml b/.travis.yml index 6d7ba85..f0f7398 100644 --- a/.travis.yml +++ b/.travis.yml @@ -1,12 +1,13 @@ language: python python: - 2.7 - - 3.4 - - 3.5 - 3.6 + - 3.7 + - 3.8 + - 3.9 - nightly script: - python setup.py install -matrix: +jobs: allow_failures: - python: nightly From 561e84f1b19024ea499d2533178b0d2f1bd45d03 Mon Sep 17 00:00:00 2001 From: "ahsan.sheraz" Date: Tue, 24 Mar 2026 17:04:24 +0100 Subject: [PATCH 3/4] fix: bump minimum versions of PyOpenSSL and pyasn1 to address CVEs - PyOpenSSL: set minimum to >=26.0.0 (fixes CVE-2026-27459) - pyasn1: set minimum to >=0.6.3 (fixes CVE-2026-30922) Previously PyOpenSSL had no minimum version constraint and pyasn1 only required >=0.1.1, allowing installation of versions with known security vulnerabilities. --- setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup.py b/setup.py index 90ab546..ea14551 100644 --- a/setup.py +++ b/setup.py @@ -31,7 +31,7 @@ 'test/pki/ca/*.0' ], }, - install_requires=['PyOpenSSL', 'pyasn1>=0.1.1'], + install_requires=['PyOpenSSL>=26.0.0', 'pyasn1>=0.6.3'], python_requires='>=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*', classifiers=[ 'Development Status :: 5 - Production/Stable', From 1e9687d7ef69f60dcec7e8f7b3c955c86f2e2f96 Mon Sep 17 00:00:00 2001 From: "ahsan.sheraz" Date: Tue, 24 Mar 2026 17:13:57 +0100 Subject: [PATCH 4/4] docs: drop Python 2 and Python < 3.8 support, update prerequisites - Updated python_requires to >=3.8 - Updated classifiers to reflect Python 3.8-3.14 - Removed Python 2 references from README - Updated prerequisites section with new minimum dependency versions --- README.md | 18 ++++++++++-------- setup.py | 14 ++++++++------ 2 files changed, 18 insertions(+), 14 deletions(-) diff --git a/README.md b/README.md index 7193452..71c931d 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,15 @@ -A HTTPS client implementation for - * ``httplib`` (Python 2), ``http.client`` (Python 3) and - * ``urllib2`` (Python 2) and ``urllib`` (Python 3) +A HTTPS client implementation for + * ``http.client`` (Python 3) and + * ``urllib`` (Python 3) -... based on PyOpenSSL. PyOpenSSL provides a more fully featured SSL implementation -over the default provided with Python and importantly enables full verification +... based on PyOpenSSL. PyOpenSSL provides a more fully featured SSL implementation +over the default provided with Python and importantly enables full verification of the SSL peer using ``pyasn1``. +**Note:** As of this version, Python 2 and Python < 3.8 are no longer supported. +``PyOpenSSL >= 26.0.0`` and ``pyasn1 >= 0.6.3`` are now required to address +CVE-2026-27459 and CVE-2026-30922 respectively. + Releases ======== 0.5.1 @@ -92,9 +96,7 @@ Initial release Prerequisites ============= -This has been developed and tested for Python 2.7 with pyOpenSSL 0.13 -and 0.14. Version 0.4.0 tested with ``pyOpenSSL`` 0.15.1 and Python 2.7 and -3.4. +Requires Python 3.8 or later, ``PyOpenSSL >= 26.0.0`` and ``pyasn1 >= 0.6.3``. ``pyasn1`` is required for correct SSL verification with ``subjectAltNames``. Installation diff --git a/setup.py b/setup.py index ea14551..ae758a0 100644 --- a/setup.py +++ b/setup.py @@ -32,7 +32,7 @@ ], }, install_requires=['PyOpenSSL>=26.0.0', 'pyasn1>=0.6.3'], - python_requires='>=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*', + python_requires='>=3.8', classifiers=[ 'Development Status :: 5 - Production/Stable', 'Environment :: Console', @@ -46,12 +46,14 @@ 'Operating System :: Microsoft :: Windows', 'Operating System :: POSIX :: Linux', 'Programming Language :: Python', - 'Programming Language :: Python :: 2', - 'Programming Language :: Python :: 2.7', 'Programming Language :: Python :: 3', - 'Programming Language :: Python :: 3.4', - 'Programming Language :: Python :: 3.5', - 'Programming Language :: Python :: 3.6', + 'Programming Language :: Python :: 3.8', + 'Programming Language :: Python :: 3.9', + 'Programming Language :: Python :: 3.10', + 'Programming Language :: Python :: 3.11', + 'Programming Language :: Python :: 3.12', + 'Programming Language :: Python :: 3.13', + 'Programming Language :: Python :: 3.14', 'Topic :: Security', 'Topic :: Internet', 'Topic :: Scientific/Engineering',