awscrt

What's Changed

• Support universal macOS binary. by @graebm in https://github.com/awslabs/aws-crt-python/pull/356
• Previous release (v0.13.10) failed

Full Changelog: https://github.com/awslabs/aws-crt-python/compare/v0.13.9...v0.13.11

What's Changed

• Add ECC support for PKCS#11. by @JamieHunter in https://github.com/awslabs/aws-crt-python/pull/352

Full Changelog: https://github.com/awslabs/aws-crt-python/compare/v0.13.8...v0.13.9

exclude ecdsa benchmarks from manifest.ini

Fix a bug in the windows implementation of ecdsa

What's Changed

• Support mutual TLS using a certificate from a Windows cert store by @graebm in https://github.com/awslabs/aws-crt-python/pull/341

Full Changelog: https://github.com/awslabs/aws-crt-python/compare/v0.13.5...v0.13.6

• Update the aws-lc submodule to a version that is not vulnerable to OpenSSL CVE-2022-0778 - Possible infinite loop in BN_mod_sqrt()

• Fixes a potential memory leak when placing a loop around the mqtt client's connect function

• Fixes an issue with the ECS credentials provider not using the port specified in the URI

• NEW: Support PKCS#11 for mutual TLS on Unix platforms.
• NEW: Support for TLS1.3
• BUGFIX: Fix MQTT crash on Windows when Will had empty payload.
• BUGFIX: Issue warning (instead of refusing to build) if insecure versions of GCC are used.
• CHANGE: aws-crt-python tests use env vars so they're easier to run locally.

• Support Python 3.10 wheels. We dropped manylinux1 for Python 3.10 as 3.10 is not available in manylinux1.

• Update aws-c-s3 for the default max part size update, which supports the huge file (large than 0.32TB to be transferred by default)
• update aws-c-common for:
  • Add build flag: USE_CPU_EXTENSIONS
  • byte_buffer_reserve work with initial capacity zero
• update aws-checksum for Add build flag: USE_CPU_EXTENSIONS

Proxy environment variable support HTTP_PROXY and HTTPS_PROXY enabled by default for S3 client

• env HTTPS_PROXY/https_proxy will be checked when the main connection use tls.
• env HTTP_PROXY/http_proxy will be checked when the main connection NOT use tls.
• The lower case version has precedence.

• Migrates Windows client-side TLS configuration to ephemeral keys

Fix the issue where "override_default_trust_store" functions did not actually override the system trust store on Linux and Apple platforms.

• Properly perform an SNI check on OSX when the root CA has been overridden.

• Removes stderr output in favor of logging when doing aws-c-cal libcrypto symbol resolution

• Fix input stream seek behavior on raspberry Pis as a side-effect of improving seek offset type/size support
• On Windows, perform SNI checks even when the root CA has been overridden
• On Windows, properly honor the verify_peer flag when set to false

• Added CRC hashes (#283)
• Fixed bug in EventStreamRPC client connect failures (#292)

• Adds support for establishing mqtt connections directly through an http proxy

• No code change, trigger our release pipeline to apply the change of code build

BUGFIX: update aws-lc for fix to ARM builds

• Fixes an issue where some characters in the uri path component were not being properly encoded during canonical request construction when using Sigv4 signing

• support non-ascii file path for windows

• BUGFIX: several memory leaks fixed
  • awscrt.eventstream.rpc.ClientConnection was leaking its native part
  • awscrt.eventstream.rpc.ClientContinuation was leaking incoming headers
  • awscrt.http.HttpRequest was leaking its headers
  • awscrt.auth.AwsSigningConfig was leaking its native part
  • each call to awscrt.auth.aws_sign_request() was leaking native native data
• BUGFIX: Fix errors when application is running on Windows for 21 days
• OPTIMIZATION: awscrt.s3.S3Request closes file handles earlier

• Updating aws-c-auth submodule
• Updating aws-c-common submodule
• Updating aws-c-mqtt submodule
• Updating aws-c-io submodule
  • BUG FIX: Fixed a file stream reading issue. This will fix an issue on Windows when uploading using the S3 Client and the send_filepath argument. Previously, the underlying data stream could terminate early.
• Updating aws-c-s3 submodule
  • BUG FIX: Fixed abort-multipart-upload messages not being sent when a multipart upload failed or was cancelled.

• Updating aws-c-mqtt submodule
• Updating aws-c-s3 submodule
  • BUG FIX: Fixed bug that could cause a slow down/hang.
  • BUG FIX: Turned off path normalization for default signing config as this can cause a signing mismatch with the service.
• Updating s2n submodule

• Updating aws-c-mqtt submodule
• Updating aws-c-http submodule
• Updating aws-c-s3 submodule
  • Under-the-hood refactoring for how requests are managed.

• Some low end machines (ex: Raspberry Pi 3B+) were running out of memory while compiling aws-lc with unlimited parallelism.

• Put necessary files back into source distribution

• Some of the dependencies are required for aws-lc to build, but we pruned them for distribution. Now, putting it back

Updating aws-c-common submodule to v0.5.3 which includes a fix for thread affinity functionality.

• BUG FIX: libssl was being built by aws-lc
• BUG FIX: Updated aws-lc to get c99 related fix
• Pruned bloat from wheel manifest

• EventStreamRPC connect ack bugfix. (#243)
• Documentation update (#242)

• New managed thread API
• Declare license in setup.py for the benefit ofpip show

• MQTT on-message callback now has qos, retain, and dup of args. This is a backwards-compatible change.

• Several fixes from aws-c-s3
• Clean up the binding

• Address instability due to numa dynamic loading on certain platforms
• Improved arm cpu feature detection

• Update aws-c-s3 fixed issues:
• Multipart upload will hang if error occurs
• Read from input stream cannot report an error correctly
• Read from input stream will have a recursive lock for cancel

• BUGFIX: latest aws-c-event-stream for deadlock fix
• INTERNAL: update to new default resolver creation function

Fix eventstream module so it's included in installed package.

NEW FEATURE: awscrt.eventstream and awscrt.eventstream.rpc

aarch64 wheels have been missing since 0.9.1, this should fix it

• BUGFIX: MQTT CONNACK with error code results in failed connection.
• BUGFIX: Fix X-Amz-Security-Token bug in HTTP request signing.
• BUGFIX: Fix ecc signature verification failures under certain cases on Windows.
• MINOR CHANGE: Accept duck typed python streams.

Updated to s2n v0.10.19 (#186)

• BUGFIX: Increased default TLS timeout. This was a frequent cause of connection failure.
• BUGFIX: Fix how SigV4 canonicalizes multiline header values.

• MAJOR CHANGE: Remove support for Python 2, Python 2.7 was end of life Jan 1, 2020.
• MAJOR CHANGE: Stop releasing wheels for Python 3.4, which was end of life in 2019.
• BUGFIX: Fixed places where unicode strings were not properly passed to C.
• INTERNAL: Many C objects now use ref-counting under the hood. This does not affect the python API.