Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove constraint of cryptography < 39 #596

Closed
jauderho opened this issue Feb 22, 2023 · 3 comments
Closed

Remove constraint of cryptography < 39 #596

jauderho opened this issue Feb 22, 2023 · 3 comments

Comments

@jauderho
Copy link

Describe the bug
cryptography==38.0.4 is being flagged as being vulnerable. The recommended solution is to move to 39.x

To Reproduce
See jauderho/dockerfiles#1723

Expected behavior
Remove constraint in

sslyze/setup.py

Line 102 in 4ec80a3

"cryptography>=2.6,<39",

Python environment (please complete the following information):

  • OS: Linux
  • Python version: 3.11

Additional context
Add any other context about the problem here.

@eloquence
Copy link

Hi @nabla-c0d3, do you have bandwidth to work on this or do you need help with it? This would unblock some dependency updates for us.

nabla-c0d3 added a commit that referenced this issue Mar 9, 2023
Keep version of sphinx that is compatible with 3.7

Refine versions

simplify reqs
@nabla-c0d3
Copy link
Owner

Fixed as part of v5.1.2.

@eloquence Hello! Which of your projects is using sslyze? Just curious

@eloquence
Copy link

Thanks much @nabla-c0d3! We have a custom test suite that performs various config checks against our prod websites (in a private repo right now), and we also use pshtt (forked because it has its own set of dependency issues) as part of our landing page scanner for SecureDrop landing pages.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants