Skip to content

Remove pyOpenSSL entirely - #1867

Merged
woodruffw merged 3 commits into
mainfrom
ww/rm-pyopenssl
Aug 11, 2026
Merged

Remove pyOpenSSL entirely#1867
woodruffw merged 3 commits into
mainfrom
ww/rm-pyopenssl

Conversation

@woodruffw

@woodruffw woodruffw commented Aug 11, 2026

Copy link
Copy Markdown
Member

Removes pyOpenSSL in favor of cryptography's first-class X.509 validator.

This is stacked on #1866.

@woodruffw woodruffw added the dependencies Pull requests that update a dependency file label Aug 11, 2026
@woodruffw
woodruffw marked this pull request as ready for review August 11, 2026 19:23
Base automatically changed from ww/rm-pyasn1 to main August 11, 2026 20:04
Signed-off-by: William Woodruff <william@yossarian.net>
We don't need to artificially re-split the chain,
since the Fulcio certs all come from our root of trust.

Signed-off-by: William Woodruff <william@yossarian.net>

@facutuesca facutuesca left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just a couple of comment/questions

Comment thread sigstore/verify/verifier.py Outdated
Comment thread sigstore/verify/verifier.py
Signed-off-by: William Woodruff <william@yossarian.net>
@facutuesca
facutuesca self-requested a review August 11, 2026 20:32

@facutuesca facutuesca left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@woodruffw
woodruffw merged commit b13b68c into main Aug 11, 2026
47 checks passed
@woodruffw
woodruffw deleted the ww/rm-pyopenssl branch August 11, 2026 20:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants