python-nss-ng 1.2.0__tar.gz → 1.2.2__tar.gz

python_nss_ng-1.2.2/.git_archival.txt

@@ -0,0 +1,4 @@
+node: 4d19efef4853c086fe11b35c259d6c27b2e02655
+node-date: 2026-07-22T14:08:02+01:00
+describe-name: v1.2.2
+ref-names: grafted, HEAD, tag: v1.2.2, origin/main, origin/HEAD

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-nss-ng
-Version: 1.2.0
+Version: 1.2.2
 Summary: Python bindings for Network Security Services (NSS) and Netscape Portable Runtime (NSPR)
 Keywords: nss,nspr,cryptography,ssl,tls,pki,x509,security
 Author-Email: John Dennis <jdennis@redhat.com>, Matthew Watkins <mwatkins@linuxfoundation.org>

python_nss_ng-1.2.2/_version.txt

@@ -0,0 +1 @@
+1.2.2

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/pyproject.toml

@@ -319,9 +319,3 @@ before-all = "yum install -y nss-devel nspr-devel pkg-config || apt-get update &
 
 [tool.cibuildwheel.macos]
 before-all = "brew install nss nspr pkg-config"
-
-[tool.uv]
-# Supply-chain cooldown: do not resolve anything published in the last
-# 7 days (rolling window; uv records it as a relative span in uv.lock).
-# Requires uv >= 0.9.17 for the relative-duration ("7 days") form.
-exclude-newer = "7 days"

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/src/__init__.py

@@ -4,6 +4,8 @@
 # SPDX-License-Identifier: MPL-2.0
 # SPDX-FileCopyrightText: Copyright (c) 2010-2025 python-nss-ng contributors
 
+# aislop-ignore-file ai-slop/unused-import -- "import" lines flagged here are RST code examples inside a documentation string, not real imports (ruff F401 validates the real ones)
+
 import sys
 from importlib.metadata import PackageNotFoundError
 from importlib.metadata import version as _pkg_version
@@ -154,7 +156,6 @@ Things All NSS programs must do
 
 - Import the NSS/NSPR modules::
 
-    from nss.error import NSPRError
     import nss.io as io
     import nss.nss as nss
     import nss.ssl as ssl

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/src/nss_context.py

@@ -29,6 +29,8 @@ import logging
 from collections.abc import Callable, Generator
 from typing import Any
 
+# aislop-ignore-file ai-slop/hallucinated-import -- "nss" is this package's own compiled C-extension module (built from py_nss.c)
+
 logger = logging.getLogger(__name__)
 
 

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/src/secure_logging.py

@@ -127,7 +127,6 @@ def check_message_safety(message: str) -> LogSensitivity:
     """
     message_lower = message.lower()
 
-    # Check for forbidden patterns
     for pattern in FORBIDDEN_LOG_PATTERNS:
         if pattern in message_lower:
             return LogSensitivity.SENSITIVE
@@ -272,7 +271,6 @@ def log_exception_safely(
         # Log only the exception type and context
         msg = f"{context}: {exc_type} occurred (details redacted for security)"
     elif sensitivity == LogSensitivity.REDACTED:
-        # Log with redaction
         msg = f"{context}: {exc_type}: {redact_message(exc_message)}"
     else:
         # Safe to log
@@ -329,23 +327,20 @@ class SecureExceptionHandler:
 
     def __exit__(self, exc_type, exc_val, exc_tb):
         if exc_type is not None:
-            # Log the exception securely
+
             def logger_fn(msg: str) -> None:
                 self.logger.log(self.log_level, msg)
 
             log_exception_safely(logger_fn, exc_val, self.context)
 
-            # Return False to re-raise, True to suppress
             return not self.reraise
         return None
 
 
 # Example usage patterns
 if __name__ == "__main__":
-    # Configure logging
     logging.basicConfig(level=logging.DEBUG)
 
-    # Create secure logger
     logger = get_secure_logger(__name__)
 
     # Safe logging

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/test/setup_certs.py

@@ -667,7 +667,7 @@ def setup_certs(args):
             logging.info('Certificate nickname "%s"\n%s', nickname, format_cert(options, nickname))
 
     logging.info("---------- Summary ----------")
-    logging.info('NSS database name="%s", password="%s"', options.db_name, options.db_passwd)
+    logging.info('NSS database name="%s", password="[REDACTED]"', options.db_name)
     logging.info("system FIPS mode=%s", get_system_fips_enabled())
     logging.info("DB FIPS mode=%s", get_db_fips_enabled(options.db_name))
     logging.info('CA nickname="%s", CA subject="%s"', options.ca_nickname, options.ca_subject)

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/test/test_client_server.py

@@ -272,7 +272,7 @@ def get_free_port():
     happens quickly enough that this is rarely an issue in practice.
     """
     with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
-        s.bind(("", 0))
+        s.bind(("127.0.0.1", 0))
         s.listen(1)
         port = s.getsockname()[1]
     return port
@@ -283,8 +283,10 @@ def server(test_port):
         print("starting server:")
 
     # Initialize
-    # Setup an IP Address to listen on any of our interfaces
-    net_addr = io.NetworkAddress(io.PR_IpAddrAny, test_port)
+    # Setup an IP Address to listen on the loopback interface only.
+    # The tests are entirely local (the client connects via localhost),
+    # so there is no need to listen on all interfaces.
+    net_addr = io.NetworkAddress(io.PR_IpAddrLoopback, test_port)
 
     if use_ssl:
         if info:

{python_nss_ng-1.2.0 → python_nss_ng-1.2.2}/uv.lock

@@ -9,10 +9,6 @@ resolution-markers = [
     "python_full_version < '3.12'",
 ]
 
-[options]
-exclude-newer = "0001-01-01T00:00:00Z" # This has no effect and is included for backwards compatibility when using relative exclude-newer values.
-exclude-newer-span = "P7D"
-
 [[package]]
 name = "ast-serialize"
 version = "0.3.0"

python_nss_ng-1.2.0/.git_archival.txt

@@ -1,4 +0,0 @@
-node: e6e197516189faac861f191a6a48f0e1d993ef3d
-node-date: 2026-06-12T13:13:22-06:00
-describe-name: v1.2.0
-ref-names: grafted, HEAD, tag: v1.2.0, origin/main, origin/HEAD

python_nss_ng-1.2.0/_version.txt

@@ -1 +0,0 @@
-1.2.0

python_nss_ng-1.2.0/mutants/pyproject.toml

@@ -1,216 +0,0 @@
-# SPDX-License-Identifier: MPL-2.0
-# SPDX-FileCopyrightText: 2025 The Linux Foundation
-
-[build-system]
-requires = [
-    "meson-python>=0.18.0",
-    "meson>=1.10.0",
-    "ninja",
-]
-build-backend = "mesonpy"
-
-[project]
-name = "python-nss-ng"
-version = "1.0.1"
-description = "Python bindings for Network Security Services (NSS) and Netscape Portable Runtime (NSPR)"
-readme = "README.md"
-license = "MPL-2.0 OR GPL-2.0-or-later OR LGPL-2.0-or-later"
-license-files = ["LICENSE", "LICENSES/MPL-2.0.txt"]
-requires-python = ">=3.10"
-authors = [
-    {name = "John Dennis", email = "jdennis@redhat.com"},
-    {name = "Matthew Watkins", email = "mwatkins@linuxfoundation.org"},
-]
-maintainers = [
-    {name = "Matthew Watkins", email = "mwatkins@linuxfoundation.org"},
-]
-keywords = [
-    "nss",
-    "nspr",
-    "cryptography",
-    "ssl",
-    "tls",
-    "pki",
-    "x509",
-    "security",
-]
-classifiers = [
-    "Development Status :: 5 - Production/Stable",
-    "Intended Audience :: Developers",
-
-    "Operating System :: POSIX",
-    "Operating System :: POSIX :: Linux",
-    "Operating System :: MacOS",
-    "Programming Language :: C",
-    "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.10",
-    "Programming Language :: Python :: 3.11",
-    "Programming Language :: Python :: 3.12",
-    "Programming Language :: Python :: 3.13",
-    "Programming Language :: Python :: 3.14",
-    "Programming Language :: Python :: Implementation :: CPython",
-    "Topic :: Security",
-    "Topic :: Security :: Cryptography",
-    "Topic :: Software Development :: Libraries :: Python Modules",
-]
-
-[project.optional-dependencies]
-test = [
-    "pytest>=9.0.2",
-    "pytest-cov>=7.0.0",
-    "coverage[toml]>=7.13.1",
-    "pytest-xdist>=3.8.0",
-    "mypy>=1.0.0",
-    "hypothesis>=6.0.0",
-    "mutmut>=2.4.0",
-    "meson>=1.10.0",
-    "meson-python>=0.18.0",
-    "ninja",
-]
-dev = [
-    "pytest>=9.0.2",
-    "pytest-cov>=7.0.0",
-    "coverage[toml]>=7.13.1",
-    "pytest-xdist>=3.8.0",
-    "mypy>=1.0.0",
-    "hypothesis>=6.0.0",
-    "mutmut>=2.4.0",
-    "ruff>=0.14.10",
-    "build>=1.3.0",
-    "meson>=1.10.0",
-    "meson-python>=0.18.0",
-    "ninja",
-]
-
-[project.urls]
-Homepage = "http://www.mozilla.org/projects/security/pki/python-nss-ng"
-Documentation = "http://www.mozilla.org/projects/security/pki/python-nss-ng"
-Repository = "https://github.com/lfreleng-actions/python-nss-ng"
-Issues = "https://github.com/lfreleng-actions/python-nss-ng/issues"
-
-[tool.meson-python.args]
-# Meson build arguments can be specified here if needed
-# For example, to enable debug builds:
-# setup = ['-Dbuildtype=debug']
-
-[tool.pytest.ini_options]
-testpaths = ["test"]
-python_files = ["test_*.py"]
-python_classes = ["Test*"]
-python_functions = ["test_*"]
-# Note: Use -n0 for serial execution for 100% reliability
-# Parallel execution (-n=auto) may have intermittent failures in PKCS12 tests
-addopts = [
-    "-v",
-    "--strict-markers",
-    "--tb=short",
-    "--cov=nss",
-    "--cov-report=xml",
-    "--cov-report=html",
-]
-markers = [
-    "nss_init: mark test as requiring NSS initialization",
-    "requires_db: mark test as requiring NSS database",
-    "slow: mark test as slow running",
-    "allow_insecure: mark test as allowing insecure/legacy configurations",
-]
-
-[tool.coverage.run]
-source = ["nss"]
-branch = true
-data_file = ".coverage"
-omit = [
-    "*/test/*",
-    "*/tests/*",
-    "*/_version.py",
-]
-
-[tool.coverage.xml]
-output = "coverage.xml"
-
-[tool.coverage.report]
-exclude_lines = [
-    "pragma: no cover",
-    "def __repr__",
-    "raise AssertionError",
-    "raise NotImplementedError",
-    "if __name__ == .__main__.:",
-    "if TYPE_CHECKING:",
-]
-
-[tool.ruff]
-line-length = 100
-target-version = "py39"
-exclude = [
-    ".git",
-    "__pycache__",
-    "build",
-    "dist",
-    ".eggs",
-    "*.egg-info",
-    ".pytest_cache",
-]
-
-[tool.ruff.lint]
-select = [
-    "E",   # pycodestyle errors
-    "W",   # pycodestyle warnings
-    "F",   # pyflakes
-    "I",   # isort
-    "B",   # flake8-bugbear
-    "C4",  # flake8-comprehensions
-    "UP",  # pyupgrade
-    "S",   # flake8-bandit (security)
-    "T20", # flake8-print
-    "PT",  # flake8-pytest-style
-    "RET", # flake8-return
-    "SIM", # flake8-simplify
-    "TCH", # flake8-type-checking
-    "RUF", # Ruff-specific rules
-]
-ignore = [
-    "E501",  # line too long, handled by formatter
-    "B008",  # do not perform function calls in argument defaults
-    "C901",  # too complex
-    "S101",  # assert detected (allow in tests)
-    "T201",  # print found (intentional in examples)
-    "UP006", # Use `X` instead of `typing.X` for type annotations (Python 3.9 compat)
-    "UP007", # Use `X | Y` for union types (Python 3.9 compat)
-    "UP035", # Import from `typing` is deprecated (Python 3.9 compat)
-]
-
-[tool.ruff.lint.per-file-ignores]
-"test_*.py" = ["E402", "S101", "S105", "S106"]  # Allow asserts and hardcoded passwords in tests
-"doc/examples/*.py" = ["T201", "S105", "S106"]  # Allow prints and test passwords in examples
-"test/setup_certs.py" = ["S603", "S607"]  # Allow subprocess calls in cert setup
-
-[tool.ruff.lint.isort]
-known-first-party = ["nss"]
-
-[tool.mypy]
-python_version = "3.9"
-warn_unused_ignores = true
-disallow_any_generics = true
-disallow_incomplete_defs = true
-no_implicit_optional = true
-strict_equality = true
-warn_redundant_casts = true
-warn_return_any = true
-check_untyped_defs = true
-
-[tool.mutmut]
-paths_to_mutate = ["src/deprecations.py", "src/secure_logging.py", "src/nss_context.py"]
-backup = false
-runner = "python -m pytest -x -q"
-tests_dir = "test/"
-dict_synonyms = ["Struct", "Named"]
-
-[tool.cibuildwheel]
-skip = ["pp*", "*-musllinux*"]
-build-verbosity = 1
-
-[tool.cibuildwheel.linux]
-before-all = "yum install -y nss-devel nspr-devel pkg-config || apt-get update && apt-get install -y libnss3-dev libnspr4-dev pkg-config"
-
-[tool.cibuildwheel.macos]
-before-all = "brew install nss nspr pkg-config"