Mailman 3 February 2016 - Twisted-web

Test
by Philippe Lafoucrière 05 Aug '21

05 Aug '21

Hi all just a test

3 2

Twisted 16.0.0 Prerelease 2 Announcement
by Amber "Hawkie" Brown 28 Feb '16

28 Feb '16

Hi everyone, A few issues were identified in Twisted 16.0.0pre1 by the Canonical MAAS team, related to the twisted.conch.ssh.keys module missing some dependencies when installed on Python 3. These issues have been fixed and are in Twisted 16.0.0pre2. You can find it and the NEWS file at https://twistedmatrix.com/Releases/pre/16.0.0pre2/ . If no further issues are identified, Twisted 16.0 will be released this week. - Amber Brown Twisted Release Manager

1 0

Re: [Twisted-web] Twisted + OpenSSL 1.0.2f issues resolved
by Emily Palmer 19 Feb '16

19 Feb '16

1 0

Twisted + OpenSSL 1.0.2f issues resolved
by Amber "Hawkie" Brown 19 Feb '16

19 Feb '16

Hi everyone, Since Tristan Seligmann has fixed https://twistedmatrix.com/trac/ticket/8189 , and the CFFI crash-on-shutdown bugs have been resolved upstream, Twisted is now fully compatible with OpenSSL 1.0.2f as included in Cryptography 1.2.2, and as included in distributions that have been updated. This fix is in Twisted trunk, but did not make it into Twisted 16.0. Twisted 16.1 will include the fix. Thanks to Tristan and Glyph (the reviewer) for getting this issue fixed. - Amber

1 0

Re: [Twisted-web] Twisted 16.0pre1 Announcement
by Emily Palmer 16 Feb '16

16 Feb '16

1 0

Twisted 16.0pre1 Announcement
by Amber "Hawkie" Brown 16 Feb '16

16 Feb '16

Hi everyone, it's time for another Twisted release! Twisted 16.0 brings some important changes, and some nice-to-haves as well. The major things are: - TLS endpoints have arrived! They're like the old `ssl:` endpoints, but support faster IPv4/IPv6 connections (using HostnameEndpoint) and always do hostname verification. - Conch now uses Cryptography instead of PyCrypto for underlying cryptographic operations. This means it'll work much better on PyPy! - Headers objects (notably used by t.web.server.Request) now support Unicode for the vast majority of cases, encoding keys to ISO-8859-1 and values to UTF-8. - WSGI support and AMP have been ported to Python 3, along with a handful of other modules. - More shedding of the past, with the GTK+ 1 reactor being removed. - Over 45 tickets have been closed. As usual, it's available for download -- go here (https://twistedmatrix.com/Releases/pre/16.0.0pre1/) to get the prerelease tarballs and the full NEWS file. Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :) Thanks! <3 - Amber Brown Twisted Release Manager

1 0

Compatibility issues with Twisted and OpenSSL 1.0.2f
by Amber "Hawkie" Brown 13 Feb '16

13 Feb '16

Hi everyone, There's a known issue with Twisted + PyOpenSSL>=0.13 using OpenSSL version 1.0.2f. Please note, this only potentially affects you if: - You use Windows or OS X -- Cryptography 1.2.2's wheels have a bundled 1.0.2f. OR - You use a Linux or FreeBSD distribution which has OpenSSL 1.0.2f. If you are using a released distribution of Ubuntu or Debian, you most likely have a *patched* (so, still secure) past version (like Ubuntu 15.10, which has a patched 1.0.2d). If you are using Fedora 23, you may have 1.0.2f. You can check by running "openssl version". There is also an unrelated issue with CFFI that causes Cryptography 1.2 wheels for Windows/OS X to cause CPython to crash on interpreter shutdown. The current highest working Cryptography version that causes a test suite pass is 1.2.2 on Linux with OpenSSL versions other than 1.0.2f, 1.1.2 on Windows & OS X without an unreleased CFFI patch, and 1.2.1 once the CFFI patch is released. Our Windows and OS X builders have their Cryptography dependencies pinned to 1.1.2 until these problems are solved. Please note, this doesn't mean your applications may or may not work in practice with OpenSSL 1.0.2f! It just means the test suite does not pass, so we can't be absolutely sure that 1.0.2f will not cause problems for you. The latest patched versions of OpenSSL are strongly recommended from a security standpoint. The relevant issues are: - Make tests pass on 1.0.2f (Twisted, https://twistedmatrix.com/trac/ticket/8189) - Crash during interpreter shutdown when using static callbacks (CFFI, https://bitbucket.org/cffi/cffi/issues/246/crash-during-interpreter-shutdow…) Regards, Amber Brown Twisted Release Manager

3 4