Skip to content

update cryptography to allow either 3.4.8 or 36.0.1 and earlier #419

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
pabs3 opened this issue Jan 9, 2022 · 3 comments · Fixed by #466
Closed

update cryptography to allow either 3.4.8 or 36.0.1 and earlier #419

pabs3 opened this issue Jan 9, 2022 · 3 comments · Fixed by #466
Labels
SDK Issue pertains to the SDK itself and not specific to any service

Comments

@pabs3
Copy link

pabs3 commented Jan 9, 2022

There is a cryptography 3.4.8 that updates the OpenSSL version used, please update the dependencies to allow it.

Also, 36.0.1 is out that rewrites parts of the codebase in Rust, so it should be much safer, please look at allowing that version:

https://cryptography.io/en/latest/changelog/

@pabs3
Copy link
Author

pabs3 commented May 26, 2022

This is especially important since cryptography 35.0.0 added support for OpenSSL 3:

https://cryptography.io/en/latest/changelog/#v35-0-0

@github-anurag
Copy link
Member

@pabs3
We have picked this task up and are evaluating on removing the upper-bound for cryptography in OCI Python SDK. We will update you soon on its progress.

@github-anurag github-anurag linked a pull request Jul 19, 2022 that will close this issue
@github-anurag
Copy link
Member

@pabs3 we increased the upper bound for cryptography. Will evaluate a bit more on removing in future release

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
SDK Issue pertains to the SDK itself and not specific to any service
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants