From: Daira Hopwood <daira@jacaranda.org>
Date: Thu, 23 Jul 2015 18:26:10 +0000 (+0100)
Subject: Require foolscap >= 0.8.0 and pyOpenSSL >= 0.13.
X-Git-Url: https://git.rkrishnan.org/components/specifications/banana.xhtml?a=commitdiff_plain;h=da09775c61d55e90e71885a15014dd063aa15564;p=tahoe-lafs%2Ftahoe-lafs.git

Require foolscap >= 0.8.0 and pyOpenSSL >= 0.13.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
---

diff --git a/src/allmydata/_auto_deps.py b/src/allmydata/_auto_deps.py
index 527253b1..8ae03d6d 100644
--- a/src/allmydata/_auto_deps.py
+++ b/src/allmydata/_auto_deps.py
@@ -37,9 +37,10 @@ install_requires = [
     #   transferring large mutable files of size N.
     # * foolscap < 0.6 is incompatible with Twisted 10.2.0.
     # * foolscap 0.6.1 quiets a DeprecationWarning.
-    # * foolscap < 0.6.3 is incompatible with Twisted-11.1.0 and newer. Since
-    #   current Twisted is 12.0, any build which needs twisted will grab a
-    #   version that requires foolscap>=0.6.3
+    # * foolscap < 0.6.3 is incompatible with Twisted-11.1.0 and newer.
+    # * foolscap 0.8.0 generates 2048-bit RSA-with-SHA-256 signatures,
+    #   rather than 1024-bit RSA-with-MD5. This also allows us to work
+    #   with a FIPS build of OpenSSL.
     # * pyOpenSSL is required by foolscap for it (foolscap) to provide secure
     #   connections. Foolscap doesn't reliably declare this dependency in a
     #   machine-readable way, so we need to declare a dependency on pyOpenSSL
@@ -49,8 +50,8 @@ install_requires = [
     #   pyOpenSSL, or foolscap switching from pyOpenSSL to a different crypto
     #   library, we need to update this declaration here.
     #
-    "foolscap >= 0.6.3",
-    "pyOpenSSL",
+    "foolscap >= 0.8.0",
+    "pyOpenSSL >= 0.13",
 
     "Nevow >= 0.6.0",