Version 0.11.3

Added

• Toggle for hostname verification in Configuration

Changed

• Hostname verification can be done independently of certificate verification

Version 0.11.2

Added

• Support for certificate fingerprint matching

Fixed

• datetime.utcnow deprecation

Changed

• commonName is no longer checked by default

Version 0.11.1

Added

• Support for "IP Address" as subject alt name in certificate verifications

Version 0.11.0

Removed

• Dependency on OpenSSL development headers

Changed

• Crypto module relies on cryptography OpenSSL binding instead of our own copy

Added

• Explicit support for PyPy

Version 0.10.0

Version 0.10.0

Removed

• Dependency on pyOpenSSL
• Dependency on certifi
• Dependency on pylsqpack

Changed

• Vendored pyOpenSSL.crypto for the certificate verification chain (X590Store)
• Vendored pylsqpack, use v1.0.3 from upstream and make module abi3 compatible
• The module _crypto and _buffer are abi3 compatible
• The whole package is abi3 ready
• certifi ca bundle is loaded only if present in the current environment (behavior will be removed in v1.0.0)

Fixed

• Mitigate ssl.match_hostname deprecation by porting urllib3 match_hostname
• Mimic ssl load_default_cert into the certification chain verification