Backport null fix (#9007)

* Bump openssl from 0.10.53 to 0.10.54 in /src/rust (#9004)

Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.53 to 0.10.54.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](sfackler/rust-openssl@openssl-v0.10.53...openssl-v0.10.54)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Added tests for NUL bytes in PKCS8 passphrases (#9001)

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alex Gaynor <[email protected]>

Author: 3 people

src/rust/Cargo.lock

@@ -16,7 +16,7 @@ cryptography-x509 = { path = "cryptography-x509" }
 cryptography-openssl = { path = "cryptography-openssl" }
 pem = "1.1"
 ouroboros = "0.15"
-openssl = "0.10.53"
+openssl = "0.10.54"
 openssl-sys = "0.9.88"
 foreign-types-shared = "0.1"
 

src/rust/Cargo.toml

@@ -8,7 +8,7 @@ publish = false
 rust-version = "1.56.0"
 
 [dependencies]
-openssl = "0.10.53"
+openssl = "0.10.54"
 ffi = { package = "openssl-sys", version = "0.9.85" }
 foreign-types = "0.3"
 foreign-types-shared = "0.1"

src/rust/cryptography-openssl/Cargo.toml

@@ -245,6 +245,13 @@ def test_invalid_public_bytes(self, backend):
                 None,
                 serialization.load_der_private_key,
             ),
+            (
+                serialization.Encoding.DER,
+                serialization.PrivateFormat.PKCS8,
+                serialization.BestAvailableEncryption(b"\x00"),
+                b"\x00",
+                serialization.load_der_private_key,
+            ),
         ],
     )
     def test_round_trip_private_serialization(