Release of PyExasol 1.0.0

General
1

We’re thrilled to announce the milestone release of PyExasol 1.0.0, marking an evolution in our Python driver for Exasol databases! This major release brings security improvements and improved, multi-version documentation.

Security Improvements:

  • Strict certificate validation - the default behavior of ExaConnection and pyexasol.connect now uses strict certificate verification ({"cert_reqs": ssl.CERT_REQUIRED}).

  • http_transport update - we updated our http_transport methods for IMPORT and EXPORT queries to include the PUBLIC KEY from PyExasol’s self-signed certificate for TLS certificate validation, ensuring secure data transfer. This is an improved security feature supported since Exasol version 8.32.0 and the enacted default behavior of version 2025.1.0.

Code & Documentation Improvements:

  • http_transport update - all values within the import_params and export_params are evaluated. This makes it more transparent which parameters to IMPORT and EXPORT PyExasol supports, as described in its Parameters page, and gives useful feedback to the user in the event of misspelled parameter names.

Help for Breaking Changes:

  • Users who do not have PyExasol pinned to be < 1.0.0 and were not explicitly setting the SSL options are likely to experience breaking changes. This is because the previous default behavior was to not require strict certificate validation ({"cert_reqs": ssl.CERT_NONE}). To determine which encryption and security measures are appropriate for your organization, please read through our Security page and update your connections appropriately.

For more details and tips on the PyExasol 1.0.0 release, please refer to our release announcement.

3 Likes
2

The release announcement can be found at:

3

For users that were using fingerprint verification, we’ve provided a patch with PyExasol 1.0.1 so that the default certificate verification will be turned off for this use case.