]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-38271: encrypt private key test files with AES256 (GH-16385)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Wed, 25 Sep 2019 16:13:54 +0000 (09:13 -0700)
committerGitHub <noreply@github.com>
Wed, 25 Sep 2019 16:13:54 +0000 (09:13 -0700)
commit4267e8f72a7d8fe0433819511a5ae45d45e1c67b
tree45de0f4cd94ae3be060e2d025817b489b136fb8e
parentca14f047b068cd0fb81ef3d5e7bea19fe8af1b58
bpo-38271: encrypt private key test files with AES256 (GH-16385)

The private keys for test_ssl were encrypted with 3DES in traditional
PKCSGH-5 format. 3DES and the digest algorithm of PKCSGH-5 are blocked by
some strict crypto policies. Use PKCSGH-8 format with AES256 encryption
instead.

Signed-off-by: Christian Heimes <christian@python.org>
https://bugs.python.org/issue38271

Automerge-Triggered-By: @tiran
(cherry picked from commit bfd0c963d88f3df69489ee250655e2b8f3d235bd)

Co-authored-by: Christian Heimes <christian@python.org>
Lib/test/keycert.passwd.pem
Lib/test/make_ssl_certs.py
Lib/test/ssl_key.passwd.pem
Misc/NEWS.d/next/Tests/2019-09-25-13-11-29.bpo-38271.iHXNIg.rst [new file with mode: 0644]