From 46677a0cb3bde6622be10061bc61daaff7a0aaca Mon Sep 17 00:00:00 2001
From: Christopher Wilcox <crwilcox@google.com>
Date: Fri, 12 Jun 2020 11:28:08 -0700
Subject: [PATCH] fix(dependencies): Further restrict RSA versions (#532)

Related to #528. RSA seems to have released another version without `python_requires` being enforced. This will guard against that for our package.
---
 setup.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/setup.py b/setup.py
index a278ac273..e12be43ae 100644
--- a/setup.py
+++ b/setup.py
@@ -21,8 +21,8 @@
 DEPENDENCIES = (
     "cachetools>=2.0.0,<5.0",
     "pyasn1-modules>=0.2.1",
-    # rsa 4.1, 4.1.1, 4.2 are broken on Py2: https://github.com/sybrenstuvel/python-rsa/issues/152
-    'rsa>=3.1.4,!=4.1,!=4.1.1,!=4.2,<5; python_version < "3"',
+    # rsa >= 4.1 no longer supports python 2 https://github.com/sybrenstuvel/python-rsa/issues/152
+    'rsa<4.1; python_version < "3"',
     'rsa>=3.1.4,<5; python_version >= "3"',
     "setuptools>=40.3.0",
     "six>=1.9.0",