Build and workflow updates

This commit includes the following updates:

  * Fix issue with enabling OpenSSL legacy provider on Windows GitHub
    runners and ee-enable use of OpenSSL binary in Windows unit tests
  * Remove unnecessary explicit workflow install of OpenSSL 3.x on macOS
  * Add Python 3.14 and remove Python 3.8 and 3.9 from Python versions
    being tested
  * Move minimum Python version to 3.10 (needed by fido2 version 2)
  * Update README and tox.ini to align with versions in pyproject.toml

Author: ronf

.github/workflows/run_tests.yml

@@ -14,20 +14,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
-        include:
-          - os: macos-latest
-            python-version: "3.10"
-            openssl-version: "3"
-          - os: macos-latest
-            python-version: "3.11"
-            openssl-version: "3"
-          - os: macos-latest
-            python-version: "3.12"
-            openssl-version: "3"
-          - os: macos-latest
-            python-version: "3.13"
-            openssl-version: "3"
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
 
     runs-on: ${{ matrix.os }}
     env:
@@ -83,11 +70,7 @@ jobs:
 
       - name: Install macOS dependencies
         if: ${{ runner.os == 'macOS' }}
-        run: brew install nettle liboqs libsodium openssl
-
-      - name: Provide OpenSSL 3
-        if: ${{ runner.os == 'macOS' && matrix.openssl-version == '3' }}
-        run: echo "/usr/local/opt/openssl@3/bin" >> $GITHUB_PATH
+        run: brew install nettle liboqs libsodium
 
       - name: Install nettle (Windows)
         if: ${{ runner.os == 'Windows' }}

README.rst

@@ -11,7 +11,7 @@ AsyncSSH: Asynchronous SSH for Python
 =====================================
 
 AsyncSSH is a Python package which provides an asynchronous client and
-server implementation of the SSHv2 protocol on top of the Python 3.6+
+server implementation of the SSHv2 protocol on top of the Python 3.10+
 asyncio framework.
 
 .. code:: python
@@ -126,8 +126,8 @@ Prerequisites
 
 To use AsyncSSH 2.0 or later, you need the following:
 
-* Python 3.6 or later
-* cryptography (PyCA) 3.1 or later
+* Python 3.10 or later
+* cryptography (PyCA) 39.0 or later
 
 Installation
 ------------

pyproject.toml

@@ -15,18 +15,17 @@ classifiers = [
     'License :: OSI Approved',
     'Operating System :: MacOS :: MacOS X',
     'Operating System :: POSIX',
-    'Programming Language :: Python :: 3.8',
-    'Programming Language :: Python :: 3.9',
     'Programming Language :: Python :: 3.10',
     'Programming Language :: Python :: 3.11',
     'Programming Language :: Python :: 3.12',
     'Programming Language :: Python :: 3.13',
+    'Programming Language :: Python :: 3.14',
     'Topic :: Internet',
     'Topic :: Security :: Cryptography',
     'Topic :: Software Development :: Libraries :: Python Modules',
     'Topic :: System :: Networking',
 ]
-requires-python = '>= 3.6'
+requires-python = '>= 3.10'
 dependencies    = [
     'cryptography >= 39.0',
     'typing_extensions >= 4.0.0',

tests/test_public_key.py

@@ -71,8 +71,7 @@
 except subprocess.CalledProcessError: # pragma: no cover
     _openssl_version = b''
 
-# Disable reliance on OpenSSL on Windows for now due to GitHub runner issues
-_openssl_available = _openssl_version != b'' and sys.platform != 'win32'
+_openssl_available = _openssl_version != b''
 
 if _openssl_available: # pragma: no branch
     _openssl_curves = run('openssl ecparam -list_curves')

tox.ini

@@ -1,18 +1,18 @@
 [tox]
-minversion = 3.8
+minversion = 3.10
 skip_missing_interpreters = True
 envlist =
     clean
     report
-    py3{8,9,10,11,12,13}-{linux,darwin,windows}
+    py3{10,11,12,13,14}-{linux,darwin,windows}
 
 [testenv]
 deps =
     aiofiles>=0.6.0
     bcrypt>=3.1.3
-    fido2>=0.9.2
+    fido2>=2
     libnacl>=1.4.2
-    pyOpenSSL>=17.0.0
+    pyOpenSSL>=23.0.0
     pytest>=7.0.1
     pytest-cov>=3.0.0
     setuptools>=18.5
@@ -25,6 +25,8 @@ platform =
     darwin: darwin
     windows: win32
 usedevelop = True
+passenv =
+    OPENSSL_MODULES
 setenv =
     PIP_USE_PEP517 = 1
     COVERAGE_FILE = .coverage.{envname}
@@ -53,7 +55,7 @@ commands =
     coverage html
     coverage xml
 depends =
-    py3{8,9,10,11,12,13}-{linux,darwin,windows}
+    py3{10,11,12,13,14}-{linux,darwin,windows}
 
 [pytest]
 testpaths = tests