From info at egenix.com Thu Jun 10 09:56:01 2010 From: info at egenix.com (eGenix Team: M.-A. Lemburg) Date: Thu, 10 Jun 2010 09:56:01 +0200 Subject: [pyOpenSSL] ANN: eGenix pyOpenSSL Distribution 0.10.0-1.0.0a Message-ID: <4C109A91.8020206@egenix.com> ________________________________________________________________________ ANNOUNCING eGenix.com pyOpenSSL Distribution Version 0.10.0-1.0.0a An easy-to-install and easy-to-use distribution of the pyOpenSSL Python interface for OpenSSL - available for Windows, Mac OS X and Unix platforms This announcement is also available on our web-site for online reading: http://www.egenix.com/company/news/eGenix-pyOpenSSL-Distribution-0.10.0-1.0.0a-1.html ________________________________________________________________________ INTRODUCTION The eGenix.com pyOpenSSL Distribution includes everything you need to get started with SSL in Python. It comes with an easy-to-use installer that includes the most recent OpenSSL library versions in pre-compiled form, making your application independent of OS provided OpenSSL libraries: http://www.egenix.com/products/python/pyOpenSSL/ pyOpenSSL is an open-source Python add-on that allows writing SSL/TLS- aware network applications as well as certificate management tools: https://launchpad.net/pyopenssl/ OpenSSL is an open-source implementation of the SSL/TLS protocol: http://www.openssl.org/ ________________________________________________________________________ NEWS This new release of the eGenix.com pyOpenSSL Distribution updates the included pyOpenSSL version to 0.10.0 and the included OpenSSL version to 1.0.0a. Main new features in pyOpenSSL 0.10.0 (from the announcement) ------------------------------------------------------------- * pyOpenSSL 0.10 exposes several more OpenSSL APIs, including support for running TLS connections over in-memory BIOs, access to the OpenSSL random number generator, the ability to pass subject and issuer parameters when creating an X509Extension instance, more control over PKCS12 creation and an API for exporting PKCS12 objects, and APIs for controlling the client CA list servers send to clients. * Several bugs have also been fixed, including a crash when certain X509Extension instances are deallocated, a mis-handling of the OpenSSL error queue in the X509Name implementation, Windows build issues, and a possible double free when using a debug build. See Jean-Paul Calderone's full announcement for all details: https://launchpad.net/pyopenssl/+announcement/4318 New features in OpenSSL 1.0.0a since our last release ----------------------------------------------------- The main new features in OpenSSL 0.9.8m is the new support for RFC 5746, which addresses the SSL renegotiation problem found in earlier OpenSSL versions. * RFC 5746 - Transport Layer Security (TLS) Renegotiation Indication Extension: http://tools.ietf.org/html/rfc5746 * For a complete list of changes see: http://www.openssl.org/news/news.html Version 0.9.8n fixes this vulnerability (see http://www.openssl.org/news/secadv_20100324.txt): * "Record of death" vulnerability in OpenSSL 0.9.8f through 0.9.8m Version 1.0.0 adds many new features, including (see http://www.openssl.org/news/news.html): * Support for Whirlpool hash algorithm * Support for GOST cipher Version 1.0.0a fixes two security issues (see http://www.openssl.org/news/secadv_20100601.txt): * Invalid ASN1 module definition for CMS. * Invalid Return value check in pkey_rsa_verifyrecover New features in the eGenix pyOpenSSL Distribution ------------------------------------------------- * The embedded OpenSSL libs will now look for certificates in /etc/ssl on Unix platforms and /System/Library/OpenSSL on Mac OS X Note that it's usually better to explicitly tell OpenSSL where to look for trusted certificates via .load_verify_locations(None, certs_dir) than to rely on the above defaults using context.set_default_verify_paths() * Added support for Win64 and precompiled Python 2.6 compatible binaries for that platform (you can find the OpenSSL libs in openssl-win64/vc9) * Added support for Mac OS X 10.6 on Intel x64. * Added .egg Distributions for Python 2.4 as well (in order to support Plone 3). As always, we provide binaries that include both pyOpenSSL and the necessary OpenSSL libraries for all supported platforms: Windows x86 and x64, Linux x86 and x64, Mac OS X PPC, x86 and x64. Due to popular demand, we've also added .egg-file format versions of our eGenix.com pyOpenSSL Distribution for Windows, Linux and Mac OS X to the available download options. These makes setups using e.g. zc.buildout and other egg-file based installers a lot easier. ________________________________________________________________________ DOWNLOADS The download archives and instructions for installing the package can be found at: http://www.egenix.com/products/python/pyOpenSSL/ ________________________________________________________________________ UPGRADING Before installing this version of pyOpenSSL, please make sure that you uninstall any previously installed pyOpenSSL version. Otherwise, you could end up not using the included OpenSSL libs. _______________________________________________________________________ SUPPORT Commercial support for these packages is available from eGenix.com. Please see http://www.egenix.com/services/support/ for details about our support offerings. _______________________________________________________________________ INFORMATION About Python (http://www.python.org/): Python is an object-oriented Open Source programming language which runs on all modern platforms. By integrating ease-of-use, clarity in coding, enterprise application connectivity and rapid application design, Python establishes an ideal programming platform for today's IT challenges. About eGenix (http://www.egenix.com/): eGenix is a software project, consulting and product company focusing on expert services and professional quality products for companies, Python users and developers. Enjoy, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Jun 10 2010) >>> Python/Zope Consulting and Support ... http://www.egenix.com/ >>> mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/ >>> mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/ ________________________________________________________________________ 2010-07-19: EuroPython 2010, Birmingham, UK 38 days to go ::: Try our new mxODBC.Connect Python Database Interface for free ! :::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/