Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x509: Replace removed register_interface with subclassing #6455

Closed
wants to merge 1 commit into from

Conversation

stanislavlevin
Copy link
Contributor

python-cryptography 38.0 removed register_interface decorator: pyca/cryptography@f70e334

Backward compatibility:
Cryptography haven't changed the interface of Certificate since it was first used by IPA (4.6.0) till cryptography 38.0.

cryptography 38.0 (pyca/cryptography@c1b7307) added tbs_precertificate_bytes attribute.

Fixes: https://pagure.io/freeipa/issue/9160

python-cryptography 38.0 removed `register_interface` decorator:
pyca/cryptography@f70e334

Backward compatibility:
Cryptography haven't changed the interface of `Certificate` since it was
first used by IPA (4.6.0) till cryptography 38.0.

cryptography 38.0 (pyca/cryptography@c1b7307)
added `tbs_precertificate_bytes` attribute.

Fixes: https://pagure.io/freeipa/issue/9160
Signed-off-by: Stanislav Levin <slev@altlinux.org>
@rcritten
Copy link
Contributor

Tests I was able to do are fine, so backwards compat works.

  • F35 - python3-cryptography-3.4.7-5.fc35
  • F37 - python3-cryptography-37.0.2-4.fc37

I got into rpm dependency hell trying to build python3-cryptography-38.0.0 due to some out-of-date rust crates. I couldn't install it with pip either.

@rcritten
Copy link
Contributor

Ok I got it to install in pip (-U FTW).

It tests out ok. Certs are loadable and while the new API is available and throws a ValueError since the IPA CA doesn't have a SCT list extension. Which is fine.

@rcritten rcritten added ipa-4-10 Mark for backport to ipa 4.10 ack Pull Request approved, can be merged labels Sep 19, 2022
@rcritten
Copy link
Contributor

master:

  • 94835d1 x509: Replace removed register_interface with subclassing

@stanislavlevin
Copy link
Contributor Author

@rcritten, thank you for review! :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ack Pull Request approved, can be merged ipa-4-10 Mark for backport to ipa 4.10 pushed Pull Request has already been pushed
Projects
None yet
2 participants