From da09775c61d55e90e71885a15014dd063aa15564 Mon Sep 17 00:00:00 2001 From: Daira Hopwood Date: Thu, 23 Jul 2015 19:26:10 +0100 Subject: [PATCH] Require foolscap >= 0.8.0 and pyOpenSSL >= 0.13. Signed-off-by: Daira Hopwood --- src/allmydata/_auto_deps.py | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/src/allmydata/_auto_deps.py b/src/allmydata/_auto_deps.py index 527253b1..8ae03d6d 100644 --- a/src/allmydata/_auto_deps.py +++ b/src/allmydata/_auto_deps.py @@ -37,9 +37,10 @@ install_requires = [ # transferring large mutable files of size N. # * foolscap < 0.6 is incompatible with Twisted 10.2.0. # * foolscap 0.6.1 quiets a DeprecationWarning. - # * foolscap < 0.6.3 is incompatible with Twisted-11.1.0 and newer. Since - # current Twisted is 12.0, any build which needs twisted will grab a - # version that requires foolscap>=0.6.3 + # * foolscap < 0.6.3 is incompatible with Twisted-11.1.0 and newer. + # * foolscap 0.8.0 generates 2048-bit RSA-with-SHA-256 signatures, + # rather than 1024-bit RSA-with-MD5. This also allows us to work + # with a FIPS build of OpenSSL. # * pyOpenSSL is required by foolscap for it (foolscap) to provide secure # connections. Foolscap doesn't reliably declare this dependency in a # machine-readable way, so we need to declare a dependency on pyOpenSSL @@ -49,8 +50,8 @@ install_requires = [ # pyOpenSSL, or foolscap switching from pyOpenSSL to a different crypto # library, we need to update this declaration here. # - "foolscap >= 0.6.3", - "pyOpenSSL", + "foolscap >= 0.8.0", + "pyOpenSSL >= 0.13", "Nevow >= 0.6.0", -- 2.45.2