Alright, it’s done. Here are the highlights since 0.6:

Bug fixes:

• Memory leak in X509.get_pubkey eliminated
• Memory leaks in X509Name.__getattr__ and X509Name.__setattr__ eliminated
• RuntimeWarning from X509Name comparison eliminated
• X509Name reference counting issues resulting in memory corruption eliminated
• Uninitialized PKeys are now rejected by X509Req signature APIs
• Memory leaks in X509Name.__getattr__ and X509Name.__setattr__ eliminated
  

New features:

• SSL_get_shutdown and SSL_set_shutdown exposed as Connection.get_shutdown and Connection.set_shutdown
• SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN exposed as SSL.SENT_SHUTDOWN and SSL.RECEIVED_SHUTDOWN
• X509_verify_cert_error_string exposed as OpenSSL.crypto.X509_verify_cert_error_string
• X509.get_serial_number and X509.set_serial_number now accept long integers
• Expose notBefore and notAfter on X509 certificates for inspection and mutation
• Expose low-level X509Name state with X509Name.get_components
• Expose hashing and DER access on X509Names