From c93c4934996139ed390d90d6b82e1c4af962dc8c Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Mon, 6 Apr 2020 22:32:25 -0400 Subject: See if we can remove an OpenSSL 1.0.1 workaround (#5184) --- src/cryptography/hazmat/backends/openssl/ciphers.py | 8 -------- 1 file changed, 8 deletions(-) diff --git a/src/cryptography/hazmat/backends/openssl/ciphers.py b/src/cryptography/hazmat/backends/openssl/ciphers.py index 4568f71f..1de81419 100644 --- a/src/cryptography/hazmat/backends/openssl/ciphers.py +++ b/src/cryptography/hazmat/backends/openssl/ciphers.py @@ -134,14 +134,6 @@ class _CipherContext(object): return outlen[0] def finalize(self): - # OpenSSL 1.0.1 on Ubuntu 12.04 (and possibly other distributions) - # appears to have a bug where you must make at least one call to update - # even if you are only using authenticate_additional_data or the - # GCM tag will be wrong. An (empty) call to update resolves this - # and is harmless for all other versions of OpenSSL. - if isinstance(self._mode, modes.GCM): - self.update(b"") - if ( self._operation == self._DECRYPT and isinstance(self._mode, modes.ModeWithAuthenticationTag) and -- cgit v1.2.3