Don't require specific version of cryptography library.

This partially reverts 12d6184 that was supposed to fix OpenSSL bug by requiring cryptography Python package that is built with newer OpenSSL library. The problem with this approach is that Linux distributions (like Fedora) ship this package built with OpenSSL dynamically linked and update OpenSSL independently. Requiring newest cryptography package is not just unnecessary, but also doesn't work for these distributions because they have older version of cryptography library. Signed-off-by: Oleg Girko <[email protected]>
OlegGirko · Nov 13, 2022 · 21191cc · 21191cc
1 parent 95a42d8
commit 21191cc
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/pyproject.toml b/pyproject.toml
@@ -160,9 +160,6 @@ bleach = ">=1.4.3"
 # Additionally we need https://github.com/python/typing/pull/817 to allow types to be
 # generic over ParamSpecs.
 typing-extensions = ">=3.10.0.1"
-# We enforce that we have a `cryptography` version that bundles an `openssl`
-# with the latest security patches.
-cryptography = ">=3.4.7"
 # ijson 3.1.4 fixes a bug with "." in property names
 ijson = ">=3.1.4"
 matrix-common = "^1.3.0"