File matrix-synapse-cryptography-version.patch of Package matrix-synapse

Overview Repositories Revisions Requests Users Attributes Meta

File matrix-synapse-cryptography-version.patch of Package matrix-synapse (Revision 054f521897877e2df6cd5d8cfcd5e201)

Currently displaying revision 054f521897877e2df6cd5d8cfcd5e201 , Show latest

From da63f4b13d888c5ddab50d84343acec7ba174e29 Mon Sep 17 00:00:00 2001
From: Oleg Girko <ol@infoserver.lv>
Date: Tue, 6 Apr 2021 23:39:20 +0100
Subject: [PATCH] Don't require specific version of cryptography library.

This partially reverts 12d6184713 that was supposed to fix OpenSSL bug
by requiring cryptography Python package that is built with newer
OpenSSL library.

The problem with this approach is that Linux distributions (like Fedora)
ship this package built with OpenSSL dynamically linked and update
OpenSSL independently.

Requiring newest cryptography package is not just unnecessary, but also
doesn't work for these distributions because they have older version of
cryptography library.

Signed-off-by: Oleg Girko <ol@infoserver.lv>
---
 pyproject.toml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 5a1b0ec437..2f0e2b0fcd 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -203,9 +203,6 @@ bleach = ">=1.4.3"
 # Additionally we need https://github.com/python/typing/pull/817 to allow types to be
 # generic over ParamSpecs.
 typing-extensions = ">=3.10.0.1"
-# We enforce that we have a `cryptography` version that bundles an `openssl`
-# with the latest security patches.
-cryptography = ">=3.4.7"
 # ijson 3.1.4 fixes a bug with "." in property names
 ijson = ">=3.1.4"
 matrix-common = "^1.3.0"
-- 
2.41.0

Places

File matrix-synapse-cryptography-version.patch of Package matrix-synapse (Revision 054f521897877e2df6cd5d8cfcd5e201)

Places