From e5bce5aa855bf895582256ffb47a3e06d97716b7 Mon Sep 17 00:00:00 2001 From: Russ Allbery Date: Wed, 18 Dec 2024 15:33:24 -0800 Subject: [PATCH] Prepare 9.1.1 release Collect the change log for the 9.1.1 release. --- CHANGELOG.md | 7 +++++++ ...2844_danfuchs_disable_kafka_x509_strict_verification.md | 3 --- 2 files changed, 7 insertions(+), 3 deletions(-) delete mode 100644 changelog.d/20241218_162844_danfuchs_disable_kafka_x509_strict_verification.md diff --git a/CHANGELOG.md b/CHANGELOG.md index feb61050..66c6a5fe 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,13 @@ Changes for the upcoming release can be found in [changelog.d](https://github.co + +## 9.1.1 (2024-12-18) + +### Bug fixes + +- Unset the `ssl.VERIFY_X509_STRICT` flag in SSL contexts used for Kafka connections. Python 3.13 enables this flag by default, and the current certs that Strimzi generates for these Kafka endpoints are missing an Authority Key Identifier, which prevents connections when the flag is set. + ## 9.1.0 (2024-12-17) diff --git a/changelog.d/20241218_162844_danfuchs_disable_kafka_x509_strict_verification.md b/changelog.d/20241218_162844_danfuchs_disable_kafka_x509_strict_verification.md deleted file mode 100644 index 62badecd..00000000 --- a/changelog.d/20241218_162844_danfuchs_disable_kafka_x509_strict_verification.md +++ /dev/null @@ -1,3 +0,0 @@ -### Bug fixes - -- Unset the `ssl.VERIFY_X509_STRICT` flag in SSL contexts used for Kafka connections. Python 3.13 enables this flag by default, and the current certs that Strimzi generates for these Kafka endpoints are missing an Authority Key Identifier, which prevents connections when the flag is set.