[Twisted-Python] PLEASE TEST: the new pyOpenSSL alpha release is a major change, and if you use TLS at all with Twisted you should test it

Glyph Lefkowitz glyph at twistedmatrix.com
Tue Jan 21 14:45:32 MST 2014


Hi everyone,

Since this particular detail was in the middle of Jean-Paul's release announcement, I feel like it's important to draw attention to it.

The new pyOpenSSL v0.14 is a substantial rewrite of all of pyOpenSSL's bindings to OpenSSL: while this rewrite should be a vast improvement, because eliminates lots of error-prone hand-written C code, replacing it with much smaller, much safer declarative C bindings via cffi, it also means that things are different now.

Different means “possibly broken” so please test any Twisted applications that use TLS with this pre-release.

Sorry for all the bold text and capital letters, but this is both a big change and also a change to a particularly security-sensitive area of the Twisted stack.  If there were ever a change that you should really test before it's marked as “final release”, this is it.

-glyph

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://twistedmatrix.com/pipermail/twisted-python/attachments/20140121/a4f149fd/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4124 bytes
Desc: not available
URL: <http://twistedmatrix.com/pipermail/twisted-python/attachments/20140121/a4f149fd/attachment.bin>


More information about the Twisted-Python mailing list