eGenix is pleased to announce the eGenix pyOpenSSL Distribution 0.13.5 for Python 2.4 - 2.7, with source and binaries for Windows, Linux and Mac OS X.
The eGenix.com pyOpenSSL Distribution includes everything you need to
get started with SSL in Python. It comes with an easy to use installer
that includes the most recent OpenSSL library versions in pre-compiled
form, making your application independent of OS provided OpenSSL libraries:
is an open-source Python add-on that allows writing SSL-aware
networking applications as as certificate managment tools. It uses the OpenSSL library as performant and robust SSL engine.
OpenSSL is an open-source implementation of the SSL/TLS protocol.
This new release of the eGenix.com pyOpenSSL Distribution
This new release of the eGenix.com pyOpenSSL Distribution updates the
included OpenSSL version to the latest OpenSSL 1.0.1h version and adds a few more context options:
OpenSSL has added support for TLS_FALLBACK_SCSV to allow applications
to block the ability for a MITM attacker to force a protocol
downgrade, e.g. to enable a POODLE (CVE-2014-3566) attack by forcing a downgrade to SSLv3. This is enabled automatically for servers.
CVE-2014-3568: OpenSSL configured with "no-ssl3" would still allow a complete SSL 3.0 handshake to run.
New in eGenix pyOpenSSL
Dropped zlib support from OpenSSL builds to more easily prevent the
CRIME attack without having to use special SSL context options.
Disabled the SSLv2 support in OpenSSL builds. SSLv2 has long been broken and this simplifies writing secure servers/clients.
Updated the included CA root certificate bundles to Mozilla's 2014-08-26 update.
Improved cipher list in https_client.py example which prefers the newer AES128-GCM and elliptic curve DH over over ciphers.
Added new context flag MODE_SEND_FALLBACK_SCSV. Documented previously
undocumented MODE_RELEASE_BUFFERS and removed non-existing
MODE_NO_COMPRESSION from the documentation.
Added web installer package to the Python Package Index (PyPI) which simplifies installation.
In addition to the usual ways of installing eGenix pyOpenSSL, we have
uploaded a web installer to PyPI, so that it is now also possible to
use one of these installation methods on all supported platforms
(Windows, Linux, Mac OS X):
easy_install egenix-pyopenssl via PyPI
pip install egenix-pyopenssl via PyPI
egg reference in zc.buildout via PyPI
running "python setup.py install" in the unzipped web installer archive directory
The web installer will automatically detect the platform and choose
the right binary download package for you. All downloads are verified
Resolved a problem with a pyOpenSSL test for certificate extensions:
OpenSSL 1.0.1i+ wants a signature algorithm to be defined when loading
Moved eGenix additions to pyOpenSSL to a new extras/ dir in the source distribution.
In previous releases, we also added the OpenSSL version number to the
package version. Since this causes very long version numbers, we have
dropped the OpenSSL version starting with 0.13.5 and will only
increase the main version number from now on. In the future, we
plan to switch to a new version scheme that is compatible with our
normal version number scheme for products.
pyOpenSSL / OpenSSL Binaries Included
In addition to providing sources, we make binaries available that include both pyOpenSSL and the necessary OpenSSL libraries for all supported platforms: Windows x86 and x64, Linux x86 and x64, Mac OS X PPC, x86 and x64.
We have also added .egg-file distribution versions of our eGenix.com pyOpenSSL Distribution for Windows, Linux and Mac OS X to the available download options. These make setups using e.g. zc.buildout and other egg-file based installers a lot easier.