python-pskc branch master updated. 1.0

[Date Prev][Date Next] [Thread Prev][Thread Next]
From: Commits of the python-pskc project <python-pskc-commits [at] lists.arthurdejong.org>
To: python-pskc-commits [at] lists.arthurdejong.org
Reply-to: python-pskc-users [at] lists.arthurdejong.org
Subject: python-pskc branch master updated. 1.0
Date: Fri, 29 Dec 2017 18:45:41 +0100 (CET)
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "python-pskc".

The branch, master has been updated
  discards  728aff37994eaa4ea152982571b7c9432dbf04fd (commit)
       via  fe63c4221abb55610a5348b89341f36be8ca4ff9 (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (728aff37994eaa4ea152982571b7c9432dbf04fd)
            \
             N -- N -- N (fe63c4221abb55610a5348b89341f36be8ca4ff9)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://arthurdejong.org/git/python-pskc/commit/?id=fe63c4221abb55610a5348b89341f36be8ca4ff9

commit fe63c4221abb55610a5348b89341f36be8ca4ff9
Author: Arthur de Jong <arthur@arthurdejong.org>
Date:   Fri Dec 29 18:44:43 2017 +0100

    Get files ready for 1.0 release

diff --git a/ChangeLog b/ChangeLog
index b39deaa..11c622f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,362 @@
+2017-12-29  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [2651e80] tests/test_write.doctest: Not all XML serialisers
+         write namespaces in same order
+
+         This ignores the namespace declarations in the generated XML
+         files because not all implementations on all environments write
+         these in the same order.
+
+2017-12-29  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [44b1353] docs/conf.py, setup.cfg, tox.ini: Add Sphinx
+         documentation checks
+
+         This also slightly tunes the way Sphinx documentation is built.
+
+2017-12-15  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [42be53b] pskc2csv.py, tox.ini: Add support for PyPy
+
+2017-12-15  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [660ed65] setup.py, tox.ini: Add support for Python 3.7
+
+2017-12-15  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [9cd97c9] README, setup.py: Use README as package long description
+
+2017-12-15  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [20bf9c5] docs/encryption.rst, pskc/encryption.py, pskc2csv.py,
+         tests/test_rfc6030.doctest: Add an is_encrypted property
+
+         This property can be use to see whether the PSKC file needs an
+         additional pre-shared key or passphrase to decrypt any stored
+         information.
+
+2017-12-27  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [c365a70] : Implement XML signature checking
+
+2017-12-17  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [418f3dc] docs/encryption.rst, docs/index.rst, docs/mac.rst,
+         docs/signatures.rst, docs/usage.rst: Add documentation for signed
+         PSKC files
+
+2017-12-23  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [a97ac46] pskc/parser.py, pskc/serialiser.py,
+         pskc/signature.py, pskc/xml.py, setup.py,
+         tests/certificate/README, tests/certificate/ca-certificate.pem,
+         tests/certificate/ca-key.pem, tests/certificate/certificate.pem,
+         tests/certificate/key.pem, tests/certificate/request.pem,
+         tests/certificate/ss-certificate.pem,
+         tests/rfc6030/figure9.pskcxml,
+         tests/test_draft_ietf_keyprov_pskc_02.doctest,
+         tests/test_rfc6030.doctest, tests/test_signature.doctest, tox.ini:
+         Implement signature checking
+
+         This adds support for creating and verifying embedded XML
+         signatures in PSKC files. This uses the third-party signxml
+         library for actual signing and verification.
+
+         The signxml library has a dependency on lxml and defusedxml
+         (and a few others) but all parts of python-pskc still work
+         correctly with our without lxml and/or defusedxml and signxml
+         is only required when working with embedded signatures.
+
+         This modifies the tox configuration to skip the signature
+         checks if singxml is not installed and to only require 100%
+         code coverage if the signature tests are done.
+
+2017-12-15  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [c0bd21f] pskc/xml.py: Move namespace moving to own function
+
+2017-09-22  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [ea503d6] pskc/__init__.py, pskc/parser.py, pskc/signature.py,
+         tests/test_draft_ietf_keyprov_pskc_02.doctest,
+         tests/test_rfc6030.doctest: Implement basic parsing of signature
+         properties
+
+2017-12-23  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [fcc6cdb] pskc2csv.py: Explicitly close output file in pskc2csv
+
+         This ensures that the file descriptor is closed if we opened
+         the file.  This is not a big problem for the script (because
+         the script exists anyway) but causes problems for the tests.
+
+2017-12-18  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [052f5bc] docs/policy.rst, pskc/parser.py,
+         pskc/policy.py, pskc/serialiser.py, tests/test_misc.doctest,
+         tests/test_write.doctest: Fix typo in pin_max_failed_attempts
+         attribute
+
+         This makes the old name (pin_max_failed_attemtps) available as
+         a deprecated property.
+
+2017-12-15  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [6f0ca70] pskc/parser.py,
+         
tests/draft-hoyer-keyprov-portable-symmetric-key-container-00/non-encrypted.pskcxml,
+         
tests/draft-hoyer-keyprov-portable-symmetric-key-container-00/password-encrypted.pskcxml,
+         
tests/draft-hoyer-keyprov-portable-symmetric-key-container-01/non-encrypted.pskcxml,
+         
tests/draft-hoyer-keyprov-portable-symmetric-key-container-01/password-encrypted.pskcxml,
+         
tests/test_draft_hoyer_keyprov_portable_symmetric_key_container.doctest:
+         Add limited support for very old draft PSKC versions
+
+         This adds basic support for parsing the PSKC files as specified
+         in draft-hoyer-keyprov-portable-symmetric-key-container-00 and
+         draft-hoyer-keyprov-portable-symmetric-key-container-01.
+
+         It should be able to extract secrets, counters, etc. but not
+         all properties from the PSKC file are supported.
+
+         It is speculated that this format resembles the "Verisign PSKC
+         format" that some applications produce.
+
+2016-09-19  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [9b85634] tests/multiotp/pskc-hotp-aes.txt,
+         tests/multiotp/pskc-hotp-pbe.txt, tests/multiotp/pskc-totp-aes.txt,
+         tests/multiotp/pskc-totp-pbe.txt,
+         tests/multiotp/tokens_hotp_aes.pskc,
+         tests/multiotp/tokens_hotp_pbe.pskc,
+         tests/multiotp/tokens_ocra_aes.pskc,
+         tests/multiotp/tokens_ocra_pbe.pskc,
+         tests/multiotp/tokens_totp_aes.pskc,
+         tests/multiotp/tokens_totp_pbe.pskc, tests/test_multiotp.doctest:
+         Add test files from multiOTP
+
+         This adds tests for parsing the files that are shipped as part
+         of the multiOTP test suite.
+
+         https://www.multiotp.net/
+
+2017-12-15  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [01507af] pskc/key.py, pskc/parser.py, pskc/serialiser.py,
+         tests/misc/partialxml.pskcxml, tests/test_misc.doctest,
+         tests/test_write.doctest: Refactor internal storate of encrypted
+         values
+
+         This changes the way encrypted values are stored internally before
+         being decrypted. For example, the internal _secret property can now
+         be a decrypted plain value or an EncryptedValue instance instead
+         of always being a DataType, simplifying some things (e.g. all
+         XML encoding/decoding is now done in the corresponding module).
+
+         This should not change the public API but does have consequences
+         for those who use custom serialisers or parsers.
+
+2017-12-13  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [dcf1919] pskc/crypto/aeskw.py, pskc/encryption.py,
+         tests/encryption/kw-camellia128.pskcxml,
+         tests/encryption/kw-camellia192.pskcxml,
+         tests/encryption/kw-camellia256.pskcxml,
+         tests/test_encryption.doctest: Add support for KW-Camellia suite
+         of algorithms
+
+2017-12-13  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [364e93d] pskc/encryption.py,
+         tests/encryption/camellia128-cbc.pskcxml,
+         tests/encryption/camellia192-cbc.pskcxml,
+         tests/encryption/camellia256-cbc.pskcxml,
+         tests/test_encryption.doctest: Add support for Camellia-CBC
+         suite of algorithms
+
+2017-10-11  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [4c5e046] docs/conf.py, docs/pskc2csv.rst, setup.cfg: Add a
+         manual page for pskc2csv
+
+2017-10-09  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [25cb2fc] setup.cfg: Ignore missing docstring in __init__ in flake
+
+2017-09-30  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [225e569] pskc/crypto/__init__.py, pskc/crypto/aeskw.py,
+         pskc/crypto/tripledeskw.py, pskc/encryption.py,
+         pskc/mac.py, setup.cfg, setup.py, tests/test_crypto.doctest,
+         tests/test_encryption.doctest, tox.ini: Replace pycrypto with
+         cryptography
+
+         The cryptography library is better supported.
+
+         This uses the functions from cryptography for AES and Triple
+         DES encryption, replaces the (un)padding functions that were
+         previously implemented in python-pskc with cryptography and uses
+         PBKDF2 implementation from hashlib.
+
+2017-09-30  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [5dff7d4] pskc/encryption.py: Use PBKDF2 from hashlib
+
+         This uses pbkdf2_hmac() from hashlib for the PBKDF2 calculation.
+         The downside of this is that this function is only available
+         since Python 2.7.8.
+
+2017-09-30  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [2c8a9b7] pskc/crypto/aeskw.py, pskc/crypto/tripledeskw.py,
+         pskc/encryption.py, pskc/mac.py, tests/test_aeskw.doctest,
+         tests/test_write.doctest: Replace use of pycrypto utility functions
+
+         This uses os.urandom() as a source for random data and replaces
+         other utility functions. This also removes one import for getting
+         the lengths of Tripple DES keys.
+
+2017-09-24  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [d0eddf8] pskc/serialiser.py, pskc/xml.py,
+         tests/test_write.doctest: Implement our own XML formatting
+
+         This avoids a using xml.dom.minidom to indent the XML tree and
+         keep the attributes ordered alphabetically. This also allows
+         for customisations to the XML formatting.
+
+2017-09-24  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [4ed4e11] tests/test_mac.doctest: Support hashlib from Python 2.7.3
+
+         Some Python versions don't have the algorithms_available property
+         but do have the algorithms property in hashlib.
+
+2017-09-24  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [b90faeb] pskc/xml.py, setup.py, tox.ini: Use defusedxml if
+         available
+
+         This uses the defusedxml library if available to defend agains
+         a number of XML-based attacks.
+
+2017-09-23  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [7272e54] pskc/serialiser.py, tests/test_write.doctest: Fix bug
+         in saving PBKDF2 salt on Python3
+
+         The PBKDF2 salt was saved in the wrong way (b'base64encodeddata'
+         instead of base64encodeddata) when using Python 3. This fixes
+         that problem and tests that saving and loading of a file that
+         uses PBKDF2 key derivation works.
+
+2017-09-23  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [cd33833] pskc2csv.py, setup.cfg, tests/test_pskc2csv.doctest:
+         Add tests for the pskc2csv script
+
+         This makes minor changes to the pskc2csv script to make it more
+         easily testable.
+
+2017-09-22  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [6028b8e] pskc2csv.py: Support adding custom CSV file headers
+
+         This allows adding an optional label to the --columns option that
+         can be used to output a label different from the key property
+         name in the CSV file header.
+
+2017-09-20  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [eef681b] pskc2csv.py: Add --secret-encoding option to pskc2csv
+
+         This option can be used to configure the encoding of the secret
+         in the CSV file (still hex by default).
+
+2017-09-20  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [6f78dd6] pskc/__init__.py, pskc/crypto/aeskw.py,
+         pskc/crypto/tripledeskw.py, pskc/exceptions.py, pskc/mac.py,
+         pskc/parser.py, pskc/policy.py, pskc/serialiser.py, setup.cfg,
+         tox.ini: Run flake8 from tox
+
+         This also makes a few small code formatting changes to ensure
+         that the flake8 tests pass.
+
+2017-09-11  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [cc3acc2] tox.ini: Simplify Tox configuration
+
+2017-06-10  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [0c00c80] pskc/__init__.py, pskc/encryption.py, pskc/parser.py,
+         pskc/serialiser.py, pskc/xml.py, pskc2csv.py: Various minor code
+         style improvements
+
+2017-06-10  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [510e6a5] pskc/encryption.py, pskc/parser.py: Normalise key
+         derivation algorithms
+
+         This makes KeyDerivation.algorithm and KeyDerivation.pbkdf2_prf
+         properties automatically normalise assigned values.
+
+2017-06-10  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [d72e6cc] pskc/xml.py: Switch to using non-deprecated method
+
+         This uses ElementTree.iter() instead of ElementTree.getiterator()
+         for going over all the child elements in the tree because the
+         latter is deprecated.
+
+2017-06-10  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [7b106ff] docs/usage.rst, pskc/key.py, tests/test_yubico.doctest:
+         Provide Key.userid convenience property
+
+         This provides a read-only userid property on Key objects that uses
+         the key_userid or device_userid value, whichever one is defined.
+
+2017-06-09  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [f0d2991] docs/conf.py, docs/encryption.rst, docs/exceptions.rst,
+         docs/mac.rst: Document supported encryption and MAC algorithms
+
+         This also includes a few other small documentation improvements.
+
+2017-06-09  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [8b8848d] pskc/encryption.py, pskc/mac.py,
+         tests/test_invalid.doctest, tests/test_mac.doctest: Refactor
+         MAC lookups
+
+         This switches to using the hashlib.new() function to be able to use
+         all hashes that are available in Python (specifically RIPEMD160).
+
+         This also adds a number of tests for HMACs using test vectors
+         from RFC 2202, RFC 4231 and RFC 2857.
+
+2017-06-09  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [e10f9c6] pskc/algorithms.py: Handle more algortihm URIs
+
+         This adds a number of algorithm URIs defined in RFC 6931 and also
+         simplifies the definition of the list of URIs. It also adds more
+         aliases for algorithms.
+
+2017-01-25  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [1fc1a03] README, docs/usage.rst, setup.py: Switch URLs to HTTPS
+
+2017-01-21  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [8de25c2] tests/actividentity/test.pskcxml,
+         tests/test_actividentity.doctest: Correct name of ActivIdentity
+         test file
+
+2017-01-21  Arthur de Jong <arthur@arthurdejong.org>
+
+       * [5889df7] ChangeLog, NEWS, README, docs/conf.py, pskc/__init__.py,
+         pskc2csv.py, setup.py: Get files ready for 0.5 release
+
 2017-01-15  Arthur de Jong <arthur@arthurdejong.org>
 
        * [29a183d] tests/test_feitian.doctest, tests/test_nagraid.doctest:
diff --git a/MANIFEST.in b/MANIFEST.in
index 6eb0c88..1510480 100644
--- a/MANIFEST.in
+++ b/MANIFEST.in
@@ -1,3 +1,3 @@
-include README NEWS ChangeLog COPYING *.py
-recursive-include tests *.doctest *.py *.pskcxml *.xml
+include README NEWS ChangeLog COPYING tox.ini *.py
+recursive-include tests *.doctest *.py *.pskcxml *.xml *.pem *.txt *.pskc 
README
 recursive-include docs *.rst *.py
diff --git a/NEWS b/NEWS
index 69459af..e8f7aa2 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,28 @@
+changes from 0.5 to 1.0
+-----------------------
+
+* fix a bug in writing passphrase encrypted PSKC files on Python3
+* fix a typo in the pin_max_failed_attempts attribute (the old name is
+  available as a deprecated property)
+* switch from pycrypto to cryptography as provider for encryption functions
+  because the latter is better supported
+* switch to using the PBKDF2 implementation from hashlib which requires
+  Python 2.7.8 or newer
+* use defusedxml when available (python-pskc now supports both standard
+  xml.etree and lxml with and without defusedxml)
+* support checking and generating embedded XML signatures (this requires the
+  signxml library which is not required for any other operations)
+* add limited support for very old draft PSKC versions (it is speculated that
+  this resembles the "Verisign PSKC format" that some applications produce)
+* support Camellia-CBC and KW-Camellia encryption algorithms
+* support any hashing algorithm available in Python
+* add a --secret-encoding option to pskc2csv to allow base64 encoded binary
+  output
+* support naming the CSV column headers in pskc2csv
+* add a manual page for pskc2csv
+* a number of documentation, code style and test suite improvements
+
+
 changes from 0.4 to 0.5
 -----------------------
 
diff --git a/pskc/__init__.py b/pskc/__init__.py
index 920e906..91c6f71 100644
--- a/pskc/__init__.py
+++ b/pskc/__init__.py
@@ -54,7 +54,7 @@ __all__ = ['PSKC', '__version__']
 
 
 # the version number of the library
-__version__ = '0.5'
+__version__ = '1.0'
 
 
 class PSKC(object):
diff --git a/setup.py b/setup.py
index e2a93f4..dfb71c7 100755
--- a/setup.py
+++ b/setup.py
@@ -48,7 +48,7 @@ setup(
     url='https://arthurdejong.org/python-pskc/',
     license='LGPL',
     classifiers=[
-        'Development Status :: 4 - Beta',
+        'Development Status :: 5 - Production/Stable',
         'Intended Audience :: Developers',
         'Intended Audience :: Information Technology',
         'Intended Audience :: System Administrators',

-----------------------------------------------------------------------

Summary of changes:
 setup.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 
python-pskc
-- 
To unsubscribe send an email to
python-pskc-commits-unsubscribe@lists.arthurdejong.org or see
https://lists.arthurdejong.org/python-pskc-commits/
python-pskc branch master updated. 1.0, Commits of the python-pskc project
- <Possible follow-ups>
- python-pskc branch master updated. 1.0, Commits of the python-pskc project
Prev by Date: python-pskc annotated tag 1.0 updated. 1.0
Previous by thread: python-pskc branch master updated. 1.0
Next by thread: python-pskc annotated tag 1.0 created. 1.0