requests-credssp

2.0.0 - 2022-02-21

• Use pyspnego for managing the CredSSP exchange
• Removed the deps of pyOpenSSl and pyasn1 as pyspnego does all the work there
• Added wrap_winrm and unwrap_winrm to unify the WinRM message encryption code into the one location

Breaking Changes

• Removed the deprecated properties and methods on the HttpCredSSPAuth class:
  • tls_context - no longer available
  • tls_connection - use auth.contexts[hostname].tls_connection
  • cipher_negotiated - use auth.contexts[hostname].tls_connection.cipher()[0]
  • wrap() - use auth.contexts[hostname].wrap()
  • unwrap() - use auth.contexts[hostname].unwrap()
• These properties and methods were removed in favour of credssp_auth.contexts[hostname].tls_context and so on.

1.3.1 - 2022-02-16

• Fix usage of recently removed pyspnego feature

1.3.0 - 2021-10-22

• Dropped Python 2.7 and 3.5, new minimum is 3.6
• Added Linux kerberos dependency of pykrb5 to line up with pyspnego deps

1.2.0 - 2020-08-14

• Changed authentication library from ntlm-auth, gssapi, or pywin32 to pyspnego.
• Dropped support for Python 2.6 and Python 3.4

• Fixed StopIterator error when gssapi, gss-ntlmssp is installed and NTLM auth was negotiated with SPNEGO.

1.1.0 (Aug 19, 2019)

• Bumped ntlm-auth minimum version to v1.2.0
• Use new NTLM context object to avoid having to base64 encode/decode the messages
• Fix invalid regex escape sequences that have been deprecated in Python 3.8
• Include LICENSE and CHANGES.md in the Python package manifest

1.0.2 (Nov 14, 2018)

• Changed some log messages to a debug level instead of info

1.0.1 (Sep 25, 2018)

• Added support for Python 3.7
• Fix version info warning msg for pub key authentication process

• Drop support for Python 3.3
• Added support for new CredSSP protocol 5 and 6, mitigates CVE 2018-0886
• Added the ability to specify a minimum CredSSP server version
• Added support for SPNEGO/Kerberos authentication over CredSSP
• Removed manual asn.1 structures and added dependency on pyasn1 for easier
  code management
• Deprecated older function in HttpCredSSPAuth that should be host specific
  instead of global
• Changed license to MIT from ISC
• Tidied up test suite to use py.test and added pep8 checks

Added support for encrypting messages with the TLS channel
Added logging support for easier debugging in the future
Added tests for Python 3.6 to CI builds

Changes in v0.0.2

• Minor bug fix for people running with older versions of pyOpenSSL.

Changes in v0.0.1

• Initial commit of library to GitHub
• Allows CredSSP authentication using NTLM as the auth method
• No encryption of message support yet, coming in future release