delta/python-setuptools-git.git/setuptools, branch 1.3 github.com: pypa/setuptools.git Merge pull request #3 from abadger/feature/socket-exception-import 2013-11-03T16:33:58+00:00 Jason R. Coombs jaraco@jaraco.com 2013-11-03T16:33:58+00:00 387324c36a298bc91dd100ca2243c86e1a3e6ef0 Import socket.error so the code throws the correct exception 
Import socket.error so the code throws the correct exception
 Merge pull request #2 from abadger/feature/ssl-match-hostname-17997 2013-11-03T16:12:40+00:00 Jason R. Coombs jaraco@jaraco.com 2013-11-03T16:12:40+00:00 6360097ac51941b83b52b006eedce60ddcf312f9 There's apparently another security issue in the python3 match_hostname code. No CVE has been issued for it yet: http://bugs.python.org/issue17997#msg194950 This merge includes two commits. The first updates the included match_hostname code to reflect what's in the python-3.3.3 and python-3.4 stdlib (with a minor change to preserve python2 compat). The second commit adds a check for the backports.ssl_match_hostname module from pypi: https://pypi.python.org/pypi/backports.ssl_match_hostname If the stdlib doesn't have ssl_match_hostname but backports.ssl_match_hostname exists it uses that code. If neither one are present, then it uses the code included in setuptools. Using backports.ssl_match_hostname helps system packagers and system admins to have a single place to maintain SSL support rather than every package that's copying the match_hostname code. On the other hand, it means that users won't get any fixes before they go into the backports.ssl_match_hostname module. Brandon Rhodes is the owner of that module and Toshio has done the last several releases to make sure that module is current with the match_hostname security issues. 
There's apparently another security issue in the python3 match_hostname code. No CVE has been issued for it yet:

http://bugs.python.org/issue17997#msg194950

This merge includes two commits. The first updates the included match_hostname code to reflect what's in the python-3.3.3 and python-3.4 stdlib (with a minor change to preserve python2 compat). The second commit adds a check for the backports.ssl_match_hostname module from pypi: https://pypi.python.org/pypi/backports.ssl_match_hostname

If the stdlib doesn't have ssl_match_hostname but backports.ssl_match_hostname exists it uses that code. If neither one are present, then it uses the code included in setuptools.

Using backports.ssl_match_hostname helps system packagers and system admins to have a single place to maintain SSL support rather than every package that's copying the match_hostname code. On the other hand, it means that users won't get any fixes before they go into the backports.ssl_match_hostname module. Brandon Rhodes is the owner of that module and Toshio has done the last several releases to make sure that module is current with the match_hostname security issues.
Bumped to 1.3 in preparation for next release. 2013-11-02T18:31:25+00:00 Jason R. Coombs jaraco@jaraco.com 2013-11-02T18:31:25+00:00 2644c5e54c7d5dae012a09f7d73d473d31aa2857 






Bump to 1.2 in preparation for feature release.
2013-10-30T18:13:35+00:00

Jason R. Coombs
jaraco@jaraco.com

2013-10-30T18:13:35+00:00

55b1ecfe8fea02b83fcb055f71c9b4bc32800d14












Merge with default
2013-10-30T18:09:28+00:00

Jason R. Coombs
jaraco@jaraco.com

2013-10-30T18:09:28+00:00

3e5c9e4ef4e2a68e2ac40fa8bf0c2906a31038a2












Look for the backports-ssl_match_hostname module from pypi before using our bundled/backported code
2013-10-28T19:42:02+00:00

Toshio Kuratomi
toshio@fedoraproject.org

2013-10-28T17:43:08+00:00

ad6bce6ab02836ea6d90e69e5c6f3b851532874a












Update ssl_match_hostname to match new stdlib code that fixes a security issue with IDNA domains.
2013-10-28T19:42:02+00:00

Toshio Kuratomi
toshio@fedoraproject.org

2013-10-28T17:35:37+00:00

38fcb3e366ee7a21ff5f0f550fe190b1326fc04b












Import socket.error so the code throws the correct exception
2013-10-28T17:54:34+00:00

Toshio Kuratomi
toshio@fedoraproject.org

2013-10-28T17:54:34+00:00

78a4d637f1db446d06f68929d76e76acd7121628












Bumped to 1.1.8 in preparation for next release.
2013-10-28T01:45:02+00:00

Jason R. Coombs
jaraco@jaraco.com

2013-10-28T01:45:02+00:00

1e0a9fb4a7f76e45970d11955caf5a1e5eb1db47












Merge with default
2013-09-28T17:33:19+00:00

Philip Thiem
ptthiem@gmail.com

2013-09-28T17:33:19+00:00

78f01306a08285e9f2abe6ad749f6ce884e12555

--HG--
extra : rebase_source : d9c70d5bebd4290f568c828c5bc3a9b93a817ff2





--HG--
extra : rebase_source : d9c70d5bebd4290f568c828c5bc3a9b93a817ff2