From da09775c61d55e90e71885a15014dd063aa15564 Mon Sep 17 00:00:00 2001
From: Daira Hopwood <daira@jacaranda.org>
Date: Thu, 23 Jul 2015 19:26:10 +0100
Subject: [PATCH] Require foolscap >= 0.8.0 and pyOpenSSL >= 0.13.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
---
src/allmydata/_auto_deps.py | 11 ++++++-----
1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/src/allmydata/_auto_deps.py b/src/allmydata/_auto_deps.py
index 527253b1..8ae03d6d 100644
--- a/src/allmydata/_auto_deps.py
+++ b/src/allmydata/_auto_deps.py
@@ -37,9 +37,10 @@ install_requires = [
# transferring large mutable files of size N.
# * foolscap < 0.6 is incompatible with Twisted 10.2.0.
# * foolscap 0.6.1 quiets a DeprecationWarning.
- # * foolscap < 0.6.3 is incompatible with Twisted-11.1.0 and newer. Since
- # current Twisted is 12.0, any build which needs twisted will grab a
- # version that requires foolscap>=0.6.3
+ # * foolscap < 0.6.3 is incompatible with Twisted-11.1.0 and newer.
+ # * foolscap 0.8.0 generates 2048-bit RSA-with-SHA-256 signatures,
+ # rather than 1024-bit RSA-with-MD5. This also allows us to work
+ # with a FIPS build of OpenSSL.
# * pyOpenSSL is required by foolscap for it (foolscap) to provide secure
# connections. Foolscap doesn't reliably declare this dependency in a
# machine-readable way, so we need to declare a dependency on pyOpenSSL
@@ -49,8 +50,8 @@ install_requires = [
# pyOpenSSL, or foolscap switching from pyOpenSSL to a different crypto
# library, we need to update this declaration here.
#
- "foolscap >= 0.6.3",
- "pyOpenSSL",
+ "foolscap >= 0.8.0",
+ "pyOpenSSL >= 0.13",
"Nevow >= 0.6.0",
--
2.45.2