security: remove vulnerable Python 2 deps (pyopenssl, pyasn1, ndg-httpsclient)

README.md

@@ -48,13 +48,7 @@ normally `easy_install` or `pip`. For example:
 pip install pusher
 ```
 
-Users on Python 2.x and older versions of pip may get a warning, due to pip compiling the optional `pusher.aiohttp` module, which uses Python 3 syntax. However, as `pusher.aiohttp` is not used by default, this does not affect the library's functionality. See [our Github issue](https://github.com/pusher/pusher-http-python/issues/52), as well as [this issue from Gunicorn](https://github.com/benoitc/gunicorn/issues/788) for more details.
-
-On Linux, you must ensure that OpenSSL is installed, e.g. on Debian/Ubuntu:
-
-```sh
-$ sudo apt-get install build-essential libssl-dev libffi-dev
-```
+**Note: Python 2 is no longer supported.** Python 2 reached end-of-life on January 1, 2020. This library requires Python 3.6+.
 
 ## Getting started
 

pusher/requests.py

@@ -9,14 +9,9 @@
 from pusher.http import process_response
 
 import requests
-import sys
 import os
 
 
-if sys.version_info < (3,):
-    import urllib3.contrib.pyopenssl
-    urllib3.contrib.pyopenssl.inject_into_urllib3()
-
 CERT_PATH = os.path.dirname(os.path.abspath(__file__)) + '/cacert.pem'
 
 

setup.py

@@ -26,8 +26,8 @@
         'Development Status :: 4 - Beta',
         'Intended Audience :: Developers',
         'Topic :: Internet :: WWW/HTTP',
-        'Programming Language :: Python :: 2',
         'Programming Language :: Python :: 3',
+        'Programming Language :: Python :: 3 :: Only',
     ],
     keywords='pusher rest realtime websockets service',
     license='MIT',
@@ -40,9 +40,6 @@
         'six',
         'requests>=2.3.0',
         'urllib3',
-        'pyopenssl',
-        'ndg-httpsclient',
-        'pyasn1',
         'pynacl'
     ],