mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-30 15:10:46 +00:00
python3-cryptography: upgrade 3.3.2 -> 36.0.1
See https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst#3601---2021-12-14 for changes * Add PSF-2.0 license and explicitly add checksums for the LICENSE files that are packaged. * RDEPENDS on python3-hypothesis (in oe-core) for ptest so we can drop the patch for skipping. * Drop backported patch for openssl3 support. * inherit new setuptools_rust class (which inherits new pyo3 class, which inherits cargo and python3-dir). * RDEPENDS on python3-pytest-subtests for ptest * Copy pyproject.toml for ptest as it defines the pytest.marker(s) needed * Cleanup and alphabetize the RDEPENDS * Use 'cargo bitbake' to generate the crate:// SRC_URIs - Needed some hacks to the Cargo.toml in src/rust/ to make this work (probably only package.repository was strictly required): [package] description = "cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, message digests, and key derivation functions." homepage = "https://github.com/pyca/cryptography" repository = "https://github.com/pyca/cryptography" * Add patches to src/rust/Cargo.toml to fix cargo errors including pem version * Add check-memfree.py to ptest to check for sufficient free memory Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
This commit is contained in:
parent
6fecc88338
commit
8589b69f9f
@ -0,0 +1,31 @@
|
|||||||
|
From ec8d3f3c61280c8140b34ed1479baef5e706f064 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Tim Orling <tim.orling@konsulko.com>
|
||||||
|
Date: Fri, 14 Jan 2022 22:02:25 -0800
|
||||||
|
Subject: [PATCH] Cargo.toml: specify pem version
|
||||||
|
|
||||||
|
pem = "1.0" is not resolving, specify the current
|
||||||
|
pem = { version: "1.0.2"}
|
||||||
|
|
||||||
|
Upstream-Status: Pending
|
||||||
|
|
||||||
|
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
||||||
|
---
|
||||||
|
src/rust/Cargo.toml | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/src/rust/Cargo.toml b/src/rust/Cargo.toml
|
||||||
|
index 617167d0..174eaa80 100644
|
||||||
|
--- a/src/rust/Cargo.toml
|
||||||
|
+++ b/src/rust/Cargo.toml
|
||||||
|
@@ -9,7 +9,7 @@ publish = false
|
||||||
|
lazy_static = "1"
|
||||||
|
pyo3 = { version = "0.15.1" }
|
||||||
|
asn1 = { version = "0.8.7", default-features = false, features = ["derive"] }
|
||||||
|
-pem = "1.0"
|
||||||
|
+pem = { version = "1.0.2" }
|
||||||
|
chrono = { version = "0.4", default-features = false, features = ["alloc", "clock"] }
|
||||||
|
ouroboros = "0.13"
|
||||||
|
|
||||||
|
--
|
||||||
|
2.30.2
|
||||||
|
|
||||||
@ -0,0 +1,28 @@
|
|||||||
|
From 4b73298b214a5b69ea6edf3c2e21dd82b2b29708 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Tim Orling <tim.orling@konsulko.com>
|
||||||
|
Date: Fri, 14 Jan 2022 22:34:59 -0800
|
||||||
|
Subject: [PATCH 2/2] Cargo.toml: edition 2018 -> 2021
|
||||||
|
|
||||||
|
Upstream-Status: Pending
|
||||||
|
|
||||||
|
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
||||||
|
---
|
||||||
|
src/rust/Cargo.toml | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/src/rust/Cargo.toml b/src/rust/Cargo.toml
|
||||||
|
index 174eaa80..7ad053d9 100644
|
||||||
|
--- a/src/rust/Cargo.toml
|
||||||
|
+++ b/src/rust/Cargo.toml
|
||||||
|
@@ -2,7 +2,7 @@
|
||||||
|
name = "cryptography-rust"
|
||||||
|
version = "0.1.0"
|
||||||
|
authors = ["The cryptography developers <cryptography-dev@python.org>"]
|
||||||
|
-edition = "2018"
|
||||||
|
+edition = "2021"
|
||||||
|
publish = false
|
||||||
|
|
||||||
|
[dependencies]
|
||||||
|
--
|
||||||
|
2.30.2
|
||||||
|
|
||||||
10
meta-python/recipes-devtools/python/python3-cryptography/check-memfree.py
Executable file
10
meta-python/recipes-devtools/python/python3-cryptography/check-memfree.py
Executable file
@ -0,0 +1,10 @@
|
|||||||
|
#!/usr/bin/env python3
|
||||||
|
# https://stackoverflow.com/questions/22102999/get-total-physical-memory-in-python/28161352
|
||||||
|
import sys
|
||||||
|
meminfo = dict((i.split()[0].rstrip(':'),int(i.split()[1])) for i in open('/proc/meminfo').readlines())
|
||||||
|
mem_free = meminfo['MemTotal']/1024./1024.
|
||||||
|
if mem_free < 2.:
|
||||||
|
raise RuntimeError("Insufficient free memory({:.3f}): requires > 2 GB".format(mem_free))
|
||||||
|
sys.exit(1)
|
||||||
|
else:
|
||||||
|
print("Free memory: {:.3f} GB".format(mem_free))
|
||||||
@ -1,10 +0,0 @@
|
|||||||
--- a/tests/hypothesis/__init__.py
|
|
||||||
+++ b/tests/hypothesis/__init__.py
|
|
||||||
@@ -3,3 +3,7 @@
|
|
||||||
# for complete details.
|
|
||||||
|
|
||||||
from __future__ import absolute_import, division, print_function
|
|
||||||
+
|
|
||||||
+import pytest
|
|
||||||
+hypothesis = pytest.importorskip("hypothesis")
|
|
||||||
+
|
|
||||||
@ -1,62 +0,0 @@
|
|||||||
Encourage our old python3-cryptography to at least start to work with OpenSSL 3.
|
|
||||||
|
|
||||||
- Backport one patch to err.py to remove a symbol which has been removed in
|
|
||||||
OpenSSL 3, and isn't used in python3-cryptography.
|
|
||||||
(50ec692749b7e2e62685b443f5e629627b03987e)
|
|
||||||
|
|
||||||
- Backport the detection of OpenSSL 3 and don't link to FIPS_mode/FIPS_mode_set
|
|
||||||
(parts of f08a7de651f9e6475c8c0a67d2a61ed8b669ddf6)
|
|
||||||
|
|
||||||
This is *not* a complete backport of the 3.0 support, but is enough that packages
|
|
||||||
such as imgtool can import python3-cryptography and operate until the upgrade is
|
|
||||||
ready.
|
|
||||||
|
|
||||||
Upstream-Status: Inappropriate
|
|
||||||
Signed-off-by: Ross Burton <ross.burton@arm.com>
|
|
||||||
|
|
||||||
diff --git a/src/_cffi_src/openssl/cryptography.py b/src/_cffi_src/openssl/cryptography.py
|
|
||||||
index f24bee5a..920a86de 100644
|
|
||||||
--- a/src/_cffi_src/openssl/cryptography.py
|
|
||||||
+++ b/src/_cffi_src/openssl/cryptography.py
|
|
||||||
@@ -35,6 +35,8 @@ INCLUDES = """
|
|
||||||
|
|
||||||
#define CRYPTOGRAPHY_OPENSSL_110F_OR_GREATER \
|
|
||||||
(OPENSSL_VERSION_NUMBER >= 0x1010006f && !CRYPTOGRAPHY_IS_LIBRESSL)
|
|
||||||
+#define CRYPTOGRAPHY_OPENSSL_300_OR_GREATER \
|
|
||||||
+ (OPENSSL_VERSION_NUMBER >= 0x30000000 && !CRYPTOGRAPHY_IS_LIBRESSL)
|
|
||||||
|
|
||||||
#define CRYPTOGRAPHY_OPENSSL_LESS_THAN_110J \
|
|
||||||
(OPENSSL_VERSION_NUMBER < 0x101000af || CRYPTOGRAPHY_IS_LIBRESSL)
|
|
||||||
@@ -54,6 +56,7 @@ INCLUDES = """
|
|
||||||
|
|
||||||
TYPES = """
|
|
||||||
static const int CRYPTOGRAPHY_OPENSSL_110F_OR_GREATER;
|
|
||||||
+static const int CRYPTOGRAPHY_OPENSSL_300_OR_GREATER;
|
|
||||||
|
|
||||||
static const int CRYPTOGRAPHY_OPENSSL_LESS_THAN_111;
|
|
||||||
static const int CRYPTOGRAPHY_OPENSSL_LESS_THAN_111B;
|
|
||||||
diff --git a/src/_cffi_src/openssl/err.py b/src/_cffi_src/openssl/err.py
|
|
||||||
index 0dd74146..42bab4d9 100644
|
|
||||||
--- a/src/_cffi_src/openssl/err.py
|
|
||||||
+++ b/src/_cffi_src/openssl/err.py
|
|
||||||
@@ -40,7 +40,6 @@ void ERR_clear_error(void);
|
|
||||||
void ERR_put_error(int, int, int, const char *, int);
|
|
||||||
|
|
||||||
int ERR_GET_LIB(unsigned long);
|
|
||||||
-int ERR_GET_FUNC(unsigned long);
|
|
||||||
int ERR_GET_REASON(unsigned long);
|
|
||||||
|
|
||||||
"""
|
|
||||||
diff --git a/src/_cffi_src/openssl/fips.py b/src/_cffi_src/openssl/fips.py
|
|
||||||
index c92bca49..38bfa231 100644
|
|
||||||
--- a/src/_cffi_src/openssl/fips.py
|
|
||||||
+++ b/src/_cffi_src/openssl/fips.py
|
|
||||||
@@ -18,7 +18,7 @@ int FIPS_mode(void);
|
|
||||||
"""
|
|
||||||
|
|
||||||
CUSTOMIZATIONS = """
|
|
||||||
-#if CRYPTOGRAPHY_IS_LIBRESSL
|
|
||||||
+#if CRYPTOGRAPHY_IS_LIBRESSL || CRYPTOGRAPHY_OPENSSL_300_OR_GREATER
|
|
||||||
static const long Cryptography_HAS_FIPS = 0;
|
|
||||||
int (*FIPS_mode_set)(int) = NULL;
|
|
||||||
int (*FIPS_mode)(void) = NULL;
|
|
||||||
@ -1,2 +1,4 @@
|
|||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
py.test
|
if ./check-memfree.py; then
|
||||||
|
pytest -vvvv tests/
|
||||||
|
fi
|
||||||
|
|||||||
@ -1,68 +0,0 @@
|
|||||||
SUMMARY = "Provides cryptographic recipes and primitives to python developers"
|
|
||||||
HOMEPAGE = "https://cryptography.io/"
|
|
||||||
SECTION = "devel/python"
|
|
||||||
LICENSE = "Apache-2.0 | BSD-3-Clause"
|
|
||||||
LIC_FILES_CHKSUM = "file://LICENSE;md5=bf405a8056a6647e7d077b0e7bc36aba \
|
|
||||||
file://LICENSE.APACHE;md5=4e168cce331e5c827d4c2b68a6200e1b \
|
|
||||||
file://LICENSE.BSD;md5=5ae30ba4123bc4f2fa49aa0b0dce887b"
|
|
||||||
|
|
||||||
LDSHARED += "-pthread"
|
|
||||||
|
|
||||||
SRC_URI[sha256sum] = "5a60d3780149e13b7a6ff7ad6526b38846354d11a15e21068e57073e29e19bed"
|
|
||||||
|
|
||||||
SRC_URI += " \
|
|
||||||
file://run-ptest \
|
|
||||||
file://h-test.patch \
|
|
||||||
file://openssl3.patch \
|
|
||||||
"
|
|
||||||
|
|
||||||
inherit pypi setuptools3
|
|
||||||
|
|
||||||
DEPENDS += " \
|
|
||||||
${PYTHON_PN}-cffi \
|
|
||||||
${PYTHON_PN}-cffi-native \
|
|
||||||
${PYTHON_PN}-asn1crypto \
|
|
||||||
${PYTHON_PN}-six \
|
|
||||||
"
|
|
||||||
|
|
||||||
RDEPENDS:${PN} += " \
|
|
||||||
${PYTHON_PN}-cffi \
|
|
||||||
${PYTHON_PN}-idna \
|
|
||||||
${PYTHON_PN}-asn1crypto \
|
|
||||||
${PYTHON_PN}-setuptools \
|
|
||||||
${PYTHON_PN}-six \
|
|
||||||
"
|
|
||||||
|
|
||||||
RDEPENDS:${PN}:class-target += " \
|
|
||||||
${PYTHON_PN}-cffi \
|
|
||||||
${PYTHON_PN}-idna \
|
|
||||||
${PYTHON_PN}-numbers \
|
|
||||||
${PYTHON_PN}-asn1crypto \
|
|
||||||
${PYTHON_PN}-setuptools \
|
|
||||||
${PYTHON_PN}-six \
|
|
||||||
${PYTHON_PN}-threading \
|
|
||||||
"
|
|
||||||
|
|
||||||
RDEPENDS:${PN}-ptest += " \
|
|
||||||
${PN} \
|
|
||||||
${PYTHON_PN}-cryptography-vectors \
|
|
||||||
${PYTHON_PN}-iso8601 \
|
|
||||||
${PYTHON_PN}-pretend \
|
|
||||||
${PYTHON_PN}-pytest \
|
|
||||||
${PYTHON_PN}-pytz \
|
|
||||||
"
|
|
||||||
|
|
||||||
inherit ptest
|
|
||||||
|
|
||||||
do_install_ptest() {
|
|
||||||
install -d ${D}${PTEST_PATH}/tests
|
|
||||||
cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/
|
|
||||||
install -d ${D}${PTEST_PATH}/tests/hazmat
|
|
||||||
cp -rf ${S}/tests/hazmat/* ${D}${PTEST_PATH}/tests/hazmat/
|
|
||||||
}
|
|
||||||
|
|
||||||
FILES:${PN}-dbg += " \
|
|
||||||
${libdir}/${PYTHON_PN}2.7/site-packages/${SRCNAME}/hazmat/bindings/.debug \
|
|
||||||
"
|
|
||||||
|
|
||||||
BBCLASSEXTEND = "native nativesdk"
|
|
||||||
@ -0,0 +1,121 @@
|
|||||||
|
SUMMARY = "Provides cryptographic recipes and primitives to python developers"
|
||||||
|
HOMEPAGE = "https://cryptography.io/"
|
||||||
|
SECTION = "devel/python"
|
||||||
|
LICENSE = "( Apache-2.0 | BSD-3-Clause ) & PSF-2.0"
|
||||||
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=bf405a8056a6647e7d077b0e7bc36aba \
|
||||||
|
file://LICENSE.APACHE;md5=4e168cce331e5c827d4c2b68a6200e1b \
|
||||||
|
file://LICENSE.BSD;md5=5ae30ba4123bc4f2fa49aa0b0dce887b \
|
||||||
|
file://LICENSE.PSF;md5=43c37d21e1dbad10cddcd150ba2c0595 \
|
||||||
|
"
|
||||||
|
LDSHARED += "-pthread"
|
||||||
|
|
||||||
|
SRC_URI[sha256sum] = "53e5c1dc3d7a953de055d77bef2ff607ceef7a2aac0353b5d630ab67f7423638"
|
||||||
|
|
||||||
|
SRC_URI += " \
|
||||||
|
file://run-ptest \
|
||||||
|
file://check-memfree.py \
|
||||||
|
file://0001-Cargo.toml-specify-pem-version.patch \
|
||||||
|
file://0002-Cargo.toml-edition-2018-2021.patch \
|
||||||
|
"
|
||||||
|
|
||||||
|
inherit pypi setuptools3_rust
|
||||||
|
|
||||||
|
DEPENDS += " \
|
||||||
|
${PYTHON_PN}-asn1crypto-native \
|
||||||
|
${PYTHON_PN}-cffi-native \
|
||||||
|
${PYTHON_PN}-setuptools-rust-native \
|
||||||
|
${PYTHON_PN}-six-native \
|
||||||
|
"
|
||||||
|
|
||||||
|
SRC_URI += " \
|
||||||
|
crate://crates.io/Inflector/0.11.4 \
|
||||||
|
crate://crates.io/aliasable/0.1.3 \
|
||||||
|
crate://crates.io/asn1/0.8.7 \
|
||||||
|
crate://crates.io/asn1_derive/0.8.7 \
|
||||||
|
crate://crates.io/autocfg/1.0.1 \
|
||||||
|
crate://crates.io/base64/0.13.0 \
|
||||||
|
crate://crates.io/bitflags/1.3.2 \
|
||||||
|
crate://crates.io/cfg-if/1.0.0 \
|
||||||
|
crate://crates.io/chrono/0.4.19 \
|
||||||
|
crate://crates.io/indoc-impl/0.3.6 \
|
||||||
|
crate://crates.io/indoc/0.3.6 \
|
||||||
|
crate://crates.io/instant/0.1.12 \
|
||||||
|
crate://crates.io/lazy_static/1.4.0 \
|
||||||
|
crate://crates.io/libc/0.2.112 \
|
||||||
|
crate://crates.io/lock_api/0.4.5 \
|
||||||
|
crate://crates.io/num-integer/0.1.44 \
|
||||||
|
crate://crates.io/num-traits/0.2.14 \
|
||||||
|
crate://crates.io/once_cell/1.9.0 \
|
||||||
|
crate://crates.io/ouroboros/0.13.0 \
|
||||||
|
crate://crates.io/ouroboros_macro/0.13.0 \
|
||||||
|
crate://crates.io/parking_lot/0.11.2 \
|
||||||
|
crate://crates.io/parking_lot_core/0.8.5 \
|
||||||
|
crate://crates.io/paste-impl/0.1.18 \
|
||||||
|
crate://crates.io/paste/0.1.18 \
|
||||||
|
crate://crates.io/pem/1.0.2 \
|
||||||
|
crate://crates.io/proc-macro-error-attr/1.0.4 \
|
||||||
|
crate://crates.io/proc-macro-error/1.0.4 \
|
||||||
|
crate://crates.io/proc-macro-hack/0.5.19 \
|
||||||
|
crate://crates.io/proc-macro2/1.0.36 \
|
||||||
|
crate://crates.io/pyo3-build-config/0.15.1 \
|
||||||
|
crate://crates.io/pyo3-macros-backend/0.15.1 \
|
||||||
|
crate://crates.io/pyo3-macros/0.15.1 \
|
||||||
|
crate://crates.io/pyo3/0.15.1 \
|
||||||
|
crate://crates.io/quote/1.0.14 \
|
||||||
|
crate://crates.io/redox_syscall/0.2.10 \
|
||||||
|
crate://crates.io/scopeguard/1.1.0 \
|
||||||
|
crate://crates.io/smallvec/1.7.0 \
|
||||||
|
crate://crates.io/stable_deref_trait/1.2.0 \
|
||||||
|
crate://crates.io/syn/1.0.85 \
|
||||||
|
crate://crates.io/unicode-xid/0.2.2 \
|
||||||
|
crate://crates.io/unindent/0.1.7 \
|
||||||
|
crate://crates.io/version_check/0.9.4 \
|
||||||
|
crate://crates.io/winapi-i686-pc-windows-gnu/0.4.0 \
|
||||||
|
crate://crates.io/winapi-x86_64-pc-windows-gnu/0.4.0 \
|
||||||
|
crate://crates.io/winapi/0.3.9 \
|
||||||
|
"
|
||||||
|
|
||||||
|
RDEPENDS:${PN} += " \
|
||||||
|
${PYTHON_PN}-asn1crypto \
|
||||||
|
${PYTHON_PN}-cffi \
|
||||||
|
${PYTHON_PN}-idna \
|
||||||
|
${PYTHON_PN}-setuptools \
|
||||||
|
${PYTHON_PN}-six \
|
||||||
|
"
|
||||||
|
|
||||||
|
RDEPENDS:${PN}:append:class-target = " \
|
||||||
|
${PYTHON_PN}-numbers \
|
||||||
|
${PYTHON_PN}-threading \
|
||||||
|
"
|
||||||
|
|
||||||
|
RDEPENDS:${PN}-ptest += " \
|
||||||
|
${PYTHON_PN}-bcrypt \
|
||||||
|
${PYTHON_PN}-cryptography-vectors \
|
||||||
|
${PYTHON_PN}-hypothesis \
|
||||||
|
${PYTHON_PN}-iso8601 \
|
||||||
|
${PYTHON_PN}-pretend \
|
||||||
|
${PYTHON_PN}-psutil \
|
||||||
|
${PYTHON_PN}-pytest \
|
||||||
|
${PYTHON_PN}-pytest-subtests \
|
||||||
|
${PYTHON_PN}-pytz \
|
||||||
|
"
|
||||||
|
|
||||||
|
inherit ptest
|
||||||
|
|
||||||
|
do_install_ptest() {
|
||||||
|
install -D ${WORKDIR}/check-memfree.py ${D}${PTEST_PATH}/
|
||||||
|
install -d ${D}${PTEST_PATH}/tests
|
||||||
|
cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/
|
||||||
|
install -d ${D}${PTEST_PATH}/tests/hazmat
|
||||||
|
cp -rf ${S}/tests/hazmat/* ${D}${PTEST_PATH}/tests/hazmat/
|
||||||
|
cp -r ${S}/pyproject.toml ${D}${PTEST_PATH}/
|
||||||
|
}
|
||||||
|
|
||||||
|
FILES:${PN}-ptest += " \
|
||||||
|
${PTEST_PATH}/check-memfree.py \
|
||||||
|
"
|
||||||
|
FILES:${PN}-dbg += " \
|
||||||
|
${PYTHON_SITEPACKAGES_DIR}/${SRCNAME}/hazmat/bindings/.debug \
|
||||||
|
"
|
||||||
|
|
||||||
|
BBCLASSEXTEND = "native nativesdk"
|
||||||
Loading…
x
Reference in New Issue
Block a user