• Home
• Services
  • Custom Python Development Projects
  • Python Training
  • Python Coaching
  • Python Consulting
  • Python and Product Support
• Products
  • Python
  • · mxODBC – Python Database Interface
  • · mxODBC Connect – Remote DB Interface
  •   
  • · eGenix PyRun – Tiny Python Runtime
  • · eGenix pyOpenSSL – SSL Interface
  •   
  • · eGenix mx Base
  •   · mxDateTime – Date/Time Library
  •   · mxTextTools – Fast Text Parsing
  •   · mxBeeBase – BTree+ On-disk DB
  •   · mxTools – Fast Python Helpers
  •   · mxProxy – Python Object Proxy
  •   · mxURL – URL Library
  •   · mxUID – UID Library
  •   · mxStack – Stack Data Type
  •   · mxQueue – Queue Data Type
  •   
  • · eGenix mx Experimental
  •   · mxNumber – High Precision Numbers
  •   · mxTidy – HTML Cleaner
  •   
  • Plone / Zope
  • · mxODBC Plone/Zope Database Adapter
  • · mxODBC Database Adapter for Plone
  • · eGenix ThreadLock Distribution
• Solutions
  • EMail Newsletters
  • SMS Text Alerts
• Support
  • General Python Support
  • Product Support
  • Product Updates
  • Mailing Lists
• Community
  • Talks & Videos
  • Python Meeting Düsseldorf (PyDDF)
  • All Things Python Blog
  • eGenix YouTube Channel
  • MoinMoin Library
  • Telegram Antispam Bot
• Company
  • About
  • Contact
  • News
  • Press
  • Legal
• Shop

eGenix pyOpenSSL Distribution 0.13.5 GA

Introduction

The eGenix.com pyOpenSSL Distribution includes everything you need to get started with SSL in Python. It comes with an easy to use installer that includes the most recent OpenSSL library versions in pre-compiled
form, making your application independent of OS provided OpenSSL libraries:

>>>   eGenix pyOpenSSL Distribution Page

pyOpenSSL is an open-source Python add-on that allows writing SSL-aware networking applications as as certificate managment tools. It uses the OpenSSL library as performant and robust SSL engine.

OpenSSL is an open-source implementation of the SSL/TLS protocol.

News

This new release of the eGenix.com pyOpenSSL Distribution This new release of the eGenix.com pyOpenSSL Distribution updates the included OpenSSL version to the latest OpenSSL 1.0.1h version and adds a few more context options:

New in OpenSSL

• Updated included OpenSSL libraries from OpenSSL 1.0.1i to 1.0.1j. See https://www.openssl.org/news/secadv_20141015.txt for a complete list of changes. The following fixes are relevant for pyOpenSSL applications:
  • CVE-2014-3567:  Memory leak in OpenSSL session ticket management.
  • OpenSSL has added support for TLS_FALLBACK_SCSV to allow applications to block the ability for a MITM attacker to force a protocol downgrade, e.g. to enable a POODLE (CVE-2014-3566) attack by forcing a downgrade to SSLv3. This is enabled automatically for servers.
    
  • CVE-2014-3568: OpenSSL configured with "no-ssl3" would still allow a complete SSL 3.0 handshake to run.
    

New in eGenix pyOpenSSL

• Dropped zlib support from OpenSSL builds to more easily prevent the CRIME attack without having to use special SSL context options.
• Disabled the SSLv2 support in OpenSSL builds. SSLv2 has long been broken and this simplifies writing secure servers/clients.
• Updated the included CA root certificate bundles to Mozilla's 2014-08-26 update.
• Improved cipher list in https_client.py example which prefers the newer AES128-GCM and elliptic curve DH over over ciphers.
• Added new context flag MODE_SEND_FALLBACK_SCSV. Documented previously undocumented MODE_RELEASE_BUFFERS and removed non-existing MODE_NO_COMPRESSION from the documentation.
• Added web installer package to the Python Package Index (PyPI) which simplifies installation.

  In addition to the usual ways of installing eGenix pyOpenSSL, we have uploaded a web installer to PyPI, so that it is now also possible to use one of these installation methods on all supported platforms (Windows, Linux, Mac OS X):

  • easy_install egenix-pyopenssl via PyPI
  • pip install egenix-pyopenssl via PyPI
  • egg reference in zc.buildout via PyPI
  • running "python setup.py install" in the unzipped web installer archive directory

  The web installer will automatically detect the platform and choose the right binary download package for you. All downloads are verified before installation.

• Resolved a problem with a pyOpenSSL test for certificate extensions: OpenSSL 1.0.1i+ wants a signature algorithm to be defined when loading PEM certificates.
• Moved eGenix additions to pyOpenSSL to a new extras/ dir in the source distribution.
• In previous releases, we also added the OpenSSL version number to the package version. Since this causes very long version numbers, we have dropped the OpenSSL version starting with 0.13.5 and will only increase the main version number from now on. In the future, we plan to switch to a new version scheme that is compatible with our normal version number scheme for products.

pyOpenSSL / OpenSSL Binaries Included

In addition to providing sources, we make binaries available that include both pyOpenSSL and the necessary OpenSSL libraries for all supported platforms: Windows x86 and x64, Linux x86 and x64, Mac OS X PPC, x86 and x64.

We have also added .egg-file distribution versions of our eGenix.com pyOpenSSL Distribution for Windows, Linux and Mac OS X to the available download options. These make setups using e.g. zc.buildout and other egg-file based installers a lot easier.

Downloads

Please visit the eGenix pyOpenSSL Distribution page for downloads, instructions on installation and documentation of the package.

Upgrading

Before installing this version of pyOpenSSL, please make sure that you uninstall any previously installed pyOpenSSL version. Otherwise, you could end up not using the included OpenSSL libs.

More Information

For more information on the eGenix pyOpenSSL Distribution, licensing and download instructions, please write to sales@egenix.com.

Enjoy !

Marc-Andre Lemburg, eGenix.com