0.4.0 - 2022-02-16
Features
- Add
usageargument fortls.default_tls_contextto control whether the context is for a initiator or acceptor - Add type annotations and include
py.typedin the package for downstream library use - Expose the
ContextProxyclass for type annotation use - Added
get_extra_infotoContextProxyto expose a common way to retrieve context specific information, this is currently used by CredSSP to retrieveclient_credential: The delegated client credential for acceptors once the context is completesslcontext: The SSL context used to create the TLS objectssl_object: The TLS object used during the CredSSP exchange
- The
client_credentialproperty onCredSSPhas been removed in favour of `context.get_extra_info('client_credential') - Added support for custom credential types
- Can be used to for things like NTLM authentication with NT/LM hashes, Kerberos with a keytab or from an explicit CCache, etc
- Support calling SSPI through
pyspnego's Negotiate proxy context- This allows users on Windows to still use Negotiate auth but with a complex set of credentials
- Also opens up the ability to use Negotiate but only with Kerberos auth
Deprecations
- The
usernameandpasswordproperty on the auth context object are deprecated and will returnNoneuntil it is removed in a future release