From 21191cc37e170a4d53314966384745cca900c147 Mon Sep 17 00:00:00 2001 From: Oleg Girko Date: Tue, 6 Apr 2021 23:39:20 +0100 Subject: [PATCH] Don't require specific version of cryptography library. This partially reverts 12d6184713 that was supposed to fix OpenSSL bug by requiring cryptography Python package that is built with newer OpenSSL library. The problem with this approach is that Linux distributions (like Fedora) ship this package built with OpenSSL dynamically linked and update OpenSSL independently. Requiring newest cryptography package is not just unnecessary, but also doesn't work for these distributions because they have older version of cryptography library. Signed-off-by: Oleg Girko --- pyproject.toml | 3 --- 1 file changed, 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e07a208e67b6..d366835d8c80 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -160,9 +160,6 @@ bleach = ">=1.4.3" # Additionally we need https://github.com/python/typing/pull/817 to allow types to be # generic over ParamSpecs. typing-extensions = ">=3.10.0.1" -# We enforce that we have a `cryptography` version that bundles an `openssl` -# with the latest security patches. -cryptography = ">=3.4.7" # ijson 3.1.4 fixes a bug with "." in property names ijson = ">=3.1.4" matrix-common = "^1.3.0"