chore(deps): Bump cryptography from 42.0.8 to 43.0.1

requirements-dev.txt

@@ -40,7 +40,7 @@ colorama==0.4.6
     # via tox
 coverage==7.6.1
     # via -r requirements-dev.in
-cryptography==42.0.8
+cryptography==43.0.1
     # via
     #   -c requirements.txt
     #   secretstorage

requirements.in

@@ -6,7 +6,7 @@
 #   git+https://github.com/example/example.git@example-vcs-ref#egg=example-pkg[foo,bar]==1.42.3
 
 backports-zoneinfo==0.2.1 ; python_version < "3.9" # Used by `djangorestframework`.
-cryptography==42.0.8
+cryptography==43.0.1
 defusedxml==0.7.1
 django-filter>=24.2
 Django>=2.2.24

requirements.txt

@@ -21,7 +21,7 @@ certifi==2024.7.4
     # via signxml
 cffi==1.16.0
     # via cryptography
-cryptography==42.0.8
+cryptography==43.0.1
     # via
     #   -r requirements.in
     #   pyopenssl

src/cl_sii/rut/crypto_utils.py

@@ -4,6 +4,7 @@
 import cryptography
 import cryptography.x509
 from cryptography.hazmat.backends.openssl import backend as crypto_x509_backend
+from cryptography.hazmat.primitives.serialization import pkcs12
 
 from . import Rut, constants
 
@@ -21,9 +22,10 @@ def get_subject_rut_from_certificate_pfx(pfx_file_bytes: bytes, password: Option
         private_key,
         x509_cert,
         additional_certs,
-    ) = crypto_x509_backend.load_key_and_certificates_from_pkcs12(
+    ) = pkcs12.load_key_and_certificates(
         data=pfx_file_bytes,
         password=password.encode() if password is not None else None,
+        backend=crypto_x509_backend,
     )
     # https://cryptography.io/en/latest/hazmat/primitives/asymmetric/serialization/#cryptography.hazmat.primitives.serialization.pkcs12.load_key_and_certificates  # noqa: E501
 

src/tests/test_libs_crypto_utils.py

@@ -916,7 +916,8 @@ def test_load_der_x509_cert_fail_value_error(self) -> None:
         with self.assertRaises(ValueError) as cm:
             load_der_x509_cert(b'hello')
         self.assertEqual(
-            cm.exception.args, ("error parsing asn1 value: ParseError { kind: ShortData }",)
+            cm.exception.args,
+            ("error parsing asn1 value: ParseError { kind: ShortData { needed: 98 } }",),
         )
 
     def test_load_pem_x509_cert_ok(self) -> None:
@@ -1004,7 +1005,7 @@ def test_load_pem_x509_cert_fail_value_error(self) -> None:
             (
                 "Unable to load PEM file. See "
                 "https://cryptography.io/en/latest/faq/#why-can-t-i-import-my-pem-file "
-                "for more details. InvalidData(InvalidLength)",
+                "for more details. InvalidData(InvalidLength(5))",
             ),
         )
 

src/tests/test_rut_crypto_utils.py

@@ -2,7 +2,7 @@
 from unittest.mock import Mock, patch
 
 import cryptography.x509
-from cryptography.hazmat.backends.openssl import backend as crypto_x509_backend
+from cryptography.hazmat.primitives.serialization import pkcs12
 
 from cl_sii import rut
 from cl_sii.libs.crypto_utils import load_der_x509_cert
@@ -19,8 +19,8 @@ def test_get_subject_rut_from_certificate_pfx_ok(self) -> None:
         x509_cert = load_der_x509_cert(cert_der_bytes)
 
         with patch.object(
-            crypto_x509_backend,
-            'load_key_and_certificates_from_pkcs12',
+            pkcs12,
+            'load_key_and_certificates',
             Mock(return_value=(None, x509_cert, None)),
         ):
             pfx_file_bytes = b'hello'
@@ -40,8 +40,8 @@ def test_get_subject_rut_from_certificate_pfx_fails_if_rut_info_is_missing(self)
         x509_cert = load_der_x509_cert(cert_der_bytes)
 
         with patch.object(
-            crypto_x509_backend,
-            'load_key_and_certificates_from_pkcs12',
+            pkcs12,
+            'load_key_and_certificates',
             Mock(return_value=(None, x509_cert, None)),
         ):
             pfx_file_bytes = b'hello'
@@ -81,8 +81,8 @@ def test_get_subject_rut_from_certificate_pfx_does_not_throw_attribute_error_if_
         )
 
         with patch.object(
-            crypto_x509_backend,
-            'load_key_and_certificates_from_pkcs12',
+            pkcs12,
+            'load_key_and_certificates',
             Mock(return_value=(None, x509_cert, None)),
         ), patch.object(
             x509_cert.extensions,