From d2b751e22d9a6b50bdaeae813c6ce28544487f8c Mon Sep 17 00:00:00 2001 From: Dave Randall <19395688+daveygit2050@users.noreply.github.com> Date: Sat, 9 Jan 2021 10:46:09 +0000 Subject: [PATCH] Bump cryptography library (#3580) From Python Safety: Cryptography 3.3 no longer allows loading of finite field Diffie-Hellman parameters of less than 512 bits in length. This change is to conform with an upcoming OpenSSL release that no longer supports smaller sizes. These keys were already wildly insecure and should not have been used in any application outside of testing. --- setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup.py b/setup.py index 0aab0bcf..17148f14 100755 --- a/setup.py +++ b/setup.py @@ -34,7 +34,7 @@ def get_version(): install_requires = [ "boto3>=1.9.201", "botocore>=1.12.201", - "cryptography>=2.3.0", + "cryptography>=3.3.1", "requests>=2.5", "xmltodict", "six>1.9",