docs/conf.py | 5 4 + 1 - 0 !
1 file changed, 4 insertions(+), 1 deletion(-)

 use local python3-doc inventory.

MANIFEST.in | 2 2 + 0 - 0 !
setup.cfg | 1 0 + 1 - 0 !
setup.py | 2 1 + 1 - 0 !
src/cryptography/__init__.py | 13 0 + 13 - 0 !
src/rust/Cargo.lock | 80 29 + 51 - 0 !
src/rust/Cargo.toml | 2 1 + 1 - 0 !
src/rust/src/asn1.rs | 2 1 + 1 - 0 !
src/rust/src/oid.rs | 5 1 + 4 - 0 !
src/rust/src/x509/certificate.rs | 21 9 + 12 - 0 !
src/rust/src/x509/common.rs | 26 13 + 13 - 0 !
src/rust/src/x509/crl.rs | 76 32 + 44 - 0 !
src/rust/src/x509/csr.rs | 19 8 + 11 - 0 !
src/rust/src/x509/extensions.rs | 2 1 + 1 - 0 !
src/rust/src/x509/ocsp_req.rs | 4 2 + 2 - 0 !
src/rust/src/x509/ocsp_resp.rs | 37 17 + 20 - 0 !
src/rust/src/x509/sct.rs | 43 20 + 23 - 0 !
src/rust/src/x509/sign.rs | 12 6 + 6 - 0 !
17 files changed, 143 insertions(+), 204 deletions(-)

 upgrade to pyo3 0.16

Ported from upstream PR: https://github.com/pyca/cryptography/pull/6935

src/rust/Cargo.lock | 30 20 + 10 - 0 !
src/rust/Cargo.toml | 2 1 + 1 - 0 !
src/rust/src/oid.rs | 5 1 + 4 - 0 !
src/rust/src/pool.rs | 10 5 + 5 - 0 !
src/rust/src/x509/certificate.rs | 5 1 + 4 - 0 !
src/rust/src/x509/crl.rs | 9 5 + 4 - 0 !
src/rust/src/x509/ocsp_req.rs | 2 1 + 1 - 0 !
src/rust/src/x509/ocsp_resp.rs | 2 1 + 1 - 0 !
8 files changed, 35 insertions(+), 30 deletions(-)

 upgrade to pyo3 0.17

Ported from upstream PR: https://github.com/pyca/cryptography/pull/6935

src/rust/Cargo.toml | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 ease asn1 version from 0.12.1 to 0.12

src/rust/Cargo.toml | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 allow pem version 1.0

src/rust/Cargo.toml | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 ease chrono dependency from 0.4.22 to 0.4

setup.cfg | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

 remove run-time dependency on cffi

On Debian we ship a separate cffi-backend package (without the cffi
.egg-info), that just contains the run-time backend. This is all that
cryptography requires at runtime.

However, pkg_resources is pedantic and complains if it can't find
expected run-time dependency's .egg-info. To, avoid the problem, we drop
the dependency.

Bug-Debian: https://bugs.debian.org/1026537

src/cryptography/hazmat/backends/openssl/ciphers.py | 2 1 + 1 - 0 !
tests/hazmat/primitives/test_ciphers.py | 8 8 + 0 - 0 !
2 files changed, 9 insertions(+), 1 deletion(-)

 don't allow update_into to mutate immutable objects (#8230)

src/cryptography/hazmat/backends/openssl/backend.py | 5 4 + 1 - 0 !
tests/hazmat/primitives/test_pkcs7.py | 6 6 + 0 - 0 !
2 files changed, 10 insertions(+), 1 deletion(-)

 fixed crash when loading a pkcs#7 bundle with no certificates (#9926)

src/cryptography/hazmat/backends/openssl/backend.py | 9 9 + 0 - 0 !
tests/hazmat/primitives/test_pkcs12.py | 18 18 + 0 - 0 !
2 files changed, 27 insertions(+)

 fixes #10422 -- don't crash when a pkcs#12 key and cert don't match
 (#10423) (#10425)