PSARC 2015/535 OpenStack service updates for Kilo PSARC 2015/458 aioeventlet - asyncio event loop scheduling callbacks in eventlet PSARC 2015/460 msgpack - C/Python bindings for MessagePack (de)serializer data PSARC 2015/466 openstackclient - OpenStack Command-line Client PSARC 2015/467 oslo.versionedobjects - Oslo Versioned Objects library PSARC 2015/468 pint - A physical quantities module PSARC 2015/469 pysaml2 - A pure Python implementation of SAML2 PSARC 2015/471 semantic_version - A library implementing the 'SemVer' scheme PSARC 2015/472 testresources - PyUnit extension for managing expensive test resources PSARC 2015/473 testscenarios - Extensions to Python unittest to support scenarios PSARC 2015/474 trollius - Port of the Tulip project (asyncio module, PEP 3156) on Python 2 PSARC 2015/475 urllib3 - HTTP library with thread-safe connection pooling, file post, and more PSARC 2015/520 oslo.concurrency - Oslo Concurrency library PSARC 2015/521 oslo.log - Oslo Logging Configuration library PSARC 2015/529 oslo.policy - Oslo Policy library PSARC 2015/530 psutil - Python system and process utilities PSARC 2015/538 fixtures - Python module to support reusable state for writing clean tests PSARC 2015/539 sqlparse - An SQL parser module for Python PSARC 2016/017 extras - Useful extra utilities for Python PSARC 2016/018 linecache2 - Port of the standard linecache module PSARC 2016/019 python-mimeparse - Basic functions for parsing mime-types PSARC 2016/020 testtools - Extensions to the Python unit testing framework PSARC 2016/021 traceback2 - Port of the standard traceback module PSARC 2016/014 OpenStack Cinder NFS driver for Solaris 22384068 OpenStack service updates for Kilo (Umbrella) 21974208 The Python module msgpack should be added to Userland 22010630 The Python trollius module should be added to Userland 22011755 The Python module pint should be added to Userland 22012256 The Python aioeventlet module should be added to Userland 22012282 The Python oslo.versionedobjects module should be added to Userland 22012317 The Python semantic_version module should be added to Userland 22012321 The Python testresources module should be added to Userland 22012329 The Python testscenarios module should be added to Userland 22012336 The Python urllib3 module should be added to Userland 22012343 The Python openstackclient module should be added to Userland 22299389 The Python oslo.concurrency module should be added to Userland 22299409 The Python oslo.log module should be added to Userland 22299418 The Python oslo.policy module should be added to Userland 22299469 The Python psutil module should be added to Userland 22337793 The Python sqlparse module should be added to Userland 22338325 The Python fixtures module should be added to Userland 22535728 The Python testtools module should be added to Userland 22535739 The Python extras module should be added to Userland 22535748 The Python linecache2 module should be added to Userland 22535753 The Python traceback2 module should be added to Userland 22535760 The Python python-mimeparse module should be added to Userland 18961001 Image filtering does not function as expected 21678935 NFS for Cinder in Solaris OpenStack 22548630 derived manifest should not enforce presence of global when installing from UAR 22629795 problem in SERVICE/KEYSTONE

     1

In-house removal of PyCrypto dependency in keystonemiddleware. This

     2

patch is Solaris-specific and not suitable for upstream.

     3

     4

--- keystonemiddleware-1.5.0/keystonemiddleware/auth_token/_memcache_crypt.py.~1~	2015-03-11 11:41:14.000000000 -0600

     5

+++ keystonemiddleware-1.5.0/keystonemiddleware/auth_token/_memcache_crypt.py	2015-04-27 17:30:54.664848743 -0600

     6

@@ -17,7 +17,7 @@

     7

 Utilities for memcache encryption and integrity check.

     8

     9

 Data should be serialized before entering these functions. Encryption

    10

-has a dependency on the pycrypto. If pycrypto is not available,

    11

+has a dependency on M2Crypto. If M2Crypto is not available,

    12

 CryptoUnavailableError will be raised.

    13

    14

 This module will not be called unless signing or encryption is enabled

    15

@@ -38,9 +38,10 @@ import sys

    16

    17

 from keystonemiddleware.i18n import _

    18

    19

-# make sure pycrypto is available

    20

+# make sure M2Crypto is available

    21

 try:

    22

-    from Crypto.Cipher import AES

    23

+    from M2Crypto.EVP import Cipher

    24

+    AES = Cipher

    25

 except ImportError:

    26

     AES = None

    27

    28

@@ -73,6 +74,13 @@ class CryptoUnavailableError(Exception):

    29

     pass

    30

    31

    32

+class InvalidKeyLength(Exception):

    33

+    """raise when AES key length is an invalid value.

    34

+

    35

+    """

    36

+    pass

    37

+

    38

+

    39

 def assert_crypto_availability(f):

    40

     """Ensure Crypto module is available."""

    41

    42

@@ -132,31 +140,44 @@ def sign_data(key, data):

    43

     return base64.b64encode(mac)

    44

    45

    46

+def _key_to_alg(key):

    47

+    """Return a M2Crypto-compatible AES-CBC algorithm name given a key."""

    48

+    aes_algs = {

    49

+        128: 'aes_128_cbc',

    50

+        192: 'aes_192_cbc',

    51

+        256: 'aes_256_cbc'

    52

+    }

    53

+

    54

+    keylen = 8 * len(key)

    55

+    if keylen not in aes_algs:

    56

+        msg = ('Invalid AES key length, %d bits') % keylen

    57

+        raise InvalidKeyLength(msg)

    58

+    return aes_algs[keylen]

    59

+

    60

+

    61

 @assert_crypto_availability

    62

 def encrypt_data(key, data):

    63

     """Encrypt the data with the given secret key.

    64

    65

-    Padding is n bytes of the value n, where 1 <= n <= blocksize.

    66

     """

    67

     iv = os.urandom(16)

    68

-    cipher = AES.new(key, AES.MODE_CBC, iv)

    69

-    padding = 16 - len(data) % 16

    70

-    return iv + cipher.encrypt(data + six.int2byte(padding) * padding)

    71

+    cipher = Cipher(alg=_key_to_alg(key), key=key, iv=iv, op=1)

    72

+    result = cipher.update(data)

    73

+    return iv + result + cipher.final()

    74

    75

    76

 @assert_crypto_availability

    77

 def decrypt_data(key, data):

    78

     """Decrypt the data with the given secret key."""

    79

     iv = data[:16]

    80

-    cipher = AES.new(key, AES.MODE_CBC, iv)

    81

+    cipher = Cipher(alg=_key_to_alg(key), key=key, iv=iv, op=0)

    82

     try:

    83

-        result = cipher.decrypt(data[16:])

    84

+        result = cipher.update(data[16:])

    85

+        result = result + cipher.final()

    86

     except Exception:

    87

         raise DecryptError(_('Encrypted data appears to be corrupted.'))

    88

    89

-    # Strip the last n padding bytes where n is the last value in

    90

-    # the plaintext

    91

-    return result[:-1 * six.byte2int([result[-1]])]

    92

+    return result

    93

    94

    95

 def protect_data(keys, data):