CryptographyDeprecationWarnings with cryptography 2.5 release #1369

joshsleeper · 2019-01-22T20:18:01Z

See the last bullet point here
https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#25---2019-01-22

The warnings I see launching my app that uses paramiko:

<VENV_LCOATION>/lib/python3.6/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
  m.add_string(self.Q_C.public_numbers().encode_point())
<VENV_LCOATION>/lib/python3.6/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
  self.curve, Q_S_bytes
<VENV_LCOATION>/lib/python3.6/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
  hm.add_string(self.Q_C.public_numbers().encode_point())

pipenv graph output for package versions

paramiko==2.4.2
  - bcrypt [required: >=3.1.3, installed: 3.1.6]
    - cffi [required: >=1.1, installed: 1.11.5]
      - pycparser [required: Any, installed: 2.19]
    - six [required: >=1.4.1, installed: 1.12.0]
  - cryptography [required: >=1.5, installed: 2.5]
    - asn1crypto [required: >=0.21.0, installed: 0.24.0]
    - cffi [required: >=1.8,!=1.11.3, installed: 1.11.5]
      - pycparser [required: Any, installed: 2.19]
    - six [required: >=1.4.1, installed: 1.12.0]
  - pyasn1 [required: >=0.1.7, installed: 0.4.5]
  - pynacl [required: >=1.0.1, installed: 1.3.0]
    - cffi [required: >=1.4.1, installed: 1.11.5]
      - pycparser [required: Any, installed: 2.19]
    - six [required: Any, installed: 1.12.0]

The text was updated successfully, but these errors were encountered:

jcea · 2019-01-23T02:12:07Z

Hitting this too:

/usr/local/lib/python3.7/site-packages/paramiko/ecdsakey.py:164: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
  self.ecdsa_curve.curve_class(), pointinfo
/usr/local/lib/python3.7/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
  m.add_string(self.Q_C.public_numbers().encode_point())
/usr/local/lib/python3.7/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
  self.curve, Q_S_bytes
/usr/local/lib/python3.7/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
  hm.add_string(self.Q_C.public_numbers().encode_point())

CamiloDFM · 2019-01-23T14:14:08Z

Same here:

<venv location>/lib/python3.6/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
  m.add_string(self.Q_C.public_numbers().encode_point())
<venv location>/lib/python3.6/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
  self.curve, Q_S_bytes
<venv location>/lib/python3.6/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
  hm.add_string(self.Q_C.public_numbers().encode_point())

This pops up when using the connect method of a paramiko.SSHClient instance. I only passed hostname, username and password to connect.

joshsleeper · 2019-01-23T14:36:32Z

I predict that everyone who uses modern Paramiko with updated peer dependencies will have this.

Also, github etiquette tip: if you have the same issue as the original issue post, I would suggest leaving a thumbs up reaction on it rather than a comment sending all subscribers an email that boils down to "me too".

patrickfish · 2019-01-23T19:47:34Z

Workaround until a fix is in place: pip install cryptography==2.4.2

Review the cryptography changelog here: https://cryptography.io/en/latest/changelog/

See paramiko/paramiko#1369

The 'paramiko' python module depends on the 'cryptography' module. There is a known 'CryptographyDeprecationWarning' problem (see paramiko/paramiko#1369) that can be resolved by installing 'cryptography==2.4.2'.

See paramiko/paramiko#1369

cowlinator · 2019-01-25T02:10:27Z

I think these are all the lines that need to be changed:

paramiko/paramiko/ecdsakey.py

Line 163 in cf7d49d

numbers = ec.EllipticCurvePublicNumbers.from_encoded_point(

paramiko/paramiko/kex_ecdh_nist.py

Line 39 in cf7d49d

m.add_string(self.Q_C.public_numbers().encode_point())

paramiko/paramiko/kex_ecdh_nist.py

Line 61 in cf7d49d

self.Q_C = ec.EllipticCurvePublicNumbers.from_encoded_point(

paramiko/paramiko/kex_ecdh_nist.py

Line 78 in cf7d49d

hm.add_string(self.Q_S.public_numbers().encode_point())

paramiko/paramiko/kex_ecdh_nist.py

Line 87 in cf7d49d

m.add_string(self.Q_S.public_numbers().encode_point())

paramiko/paramiko/kex_ecdh_nist.py

Line 95 in cf7d49d

self.Q_S = ec.EllipticCurvePublicNumbers.from_encoded_point(

paramiko/paramiko/kex_ecdh_nist.py

Line 111 in cf7d49d

hm.add_string(self.Q_C.public_numbers().encode_point())

paramiko/tests/test_kex.py

Line 45 in cf7d49d

public_key_numbers_obj = ec.EllipticCurvePublicNumbers.from_encoded_point(

paramiko/tests/test_kex.py

Line 52 in cf7d49d

obj.Q_S = ec.EllipticCurvePublicNumbers.from_encoded_point(

paramiko/tests/test_kex.py

Line 56 in cf7d49d

obj.Q_C = ec.EllipticCurvePublicNumbers.from_encoded_point(

EllipticCurvePublicNumbers.from_encoded_point needs to be replaced with EllipticCurvePublicKey.from_encoded_point.

Also, EllipticCurvePublicNumbers.encode_point needs to be replaced with EllipticCurvePublicKey.public_bytes

The 'paramiko' python module depends on the 'cryptography' module. There is a known 'CryptographyDeprecationWarning' problem (see paramiko/paramiko#1369) that can be resolved by installing 'cryptography==2.4.2'.

More info: paramiko/paramiko#1369

Fixes paramiko#1369

bitprophet · 2019-02-09T22:53:34Z

Upstream has blessed #1379 so let's close this and roll it into that.

Support python 3.5.6. * downgrade cryptography to 2.4.2 due to paramiko/paramiko#1369 * fix tests * 3.5 doesn't like path objects being passed around in some cases

paramiko/paramiko#1369

Workaround until paramiko/paramiko#1369 is fully merged upstream

sjamaan · 2019-03-19T10:08:03Z

When will there be a release that includes this change? From what I can tell, latest release on Pypi is 2.4.2 from 2018.

* port to python3 (#24) * initial 2to3 run * remove import of distribute * format to PEP8 spec * pasteurized * remove imports not yet installed via install_requires * require future * install fabric3 and pin cryptography to v2.4.2 to prevent warnings: paramiko/paramiko#1369 * install supervisor using master branch with python3 support * update to celery v4.2.1 * encode unicode string * load yaml securely * bump version

See paramiko/paramiko#1369.

Fixes paramiko#1369 port of paramiko#1379

kabirbaidhya · 2019-05-08T08:17:38Z

Any updates on when the new version will be published with this fix?

AInteriorB · 2019-05-08T09:29:35Z

It would be great to hear from you. We use duplicity for backups. There, warnings are important for us as an indication for a failed or incomplete backup.

ninjape · 2019-05-14T08:53:11Z

I have cryptography 2.6.1 and the warnings still persist. Any solution?

ploxiln · 2019-05-14T14:17:53Z

see #1379 for any and all solutions/questions/comments/updates

TheSima · 2020-03-26T11:45:23Z

For old versions I'm use filter of warnings:

import warnings
from cryptography.utils import DeprecatedIn25
warnings.simplefilter('ignore', DeprecatedIn25)

It's works for me.

jelmer added a commit to jelmer/breezy that referenced this issue Jan 24, 2019

Ignore CryptographyDeprecationWarning in CI.

77531f1

See paramiko/paramiko#1369

jaywcarman mentioned this issue Jan 24, 2019

fix: Resolve 'CryptographyDeprecationWarning' IBM/power-up#341

Merged

jelmer added a commit to jelmer/breezy that referenced this issue Jan 24, 2019

Ignore CryptographyDeprecationWarning in CI.

50dc7ec

See paramiko/paramiko#1369

jelmer added a commit to jelmer/breezy that referenced this issue Jan 25, 2019

Ignore UserWarning.

65c0b5b

See paramiko/paramiko#1369

cassamajor mentioned this issue Jan 27, 2019

ProxyJump Assistance (and request for an ssh_config proof of concept) fabric/fabric#1935

Open

This was referenced Jan 28, 2019

Bug fix for webapp ssh Azure/azure-cli#8324

Merged

[webapp] upgrade paramiko Azure/azure-cli#8364

Closed

remram44 mentioned this issue Feb 2, 2019

Getting an error on connecting jbardin/scp.py#126

Closed

zhenz added a commit to ChameleonCloud/abracadabra that referenced this issue Feb 4, 2019

Fix paramiko warnings

6fff416

More info: paramiko/paramiko#1369

rectalogic added a commit to rectalogic/paramiko that referenced this issue Feb 6, 2019

Move to cryptography 2.5 and stop using deprecated APIs.

36fbe57

Fixes paramiko#1369

rectalogic mentioned this issue Feb 6, 2019

Move to cryptography 2.5 and stop using deprecated APIs. #1379

Merged

bitprophet added this to the p0 milestone Feb 9, 2019

bitprophet closed this as completed Feb 9, 2019

bitprophet removed this from the p0 milestone Feb 9, 2019

rwalton-arm added a commit to PelionIoT/mbl-cli that referenced this issue Feb 11, 2019

downgrade cryptography to 2.4.2 due to paramiko/paramiko#1369

f8970c4

sommern mentioned this issue Feb 15, 2019

paramiko error git-keeper/git-keeper#138

Closed

pymonger added a commit to sdskit/sdscli that referenced this issue Feb 20, 2019

install fabric3 and pin cryptography to v2.4.2 to prevent warnings

5369012

paramiko/paramiko#1369

yboetz mentioned this issue Feb 21, 2019

pyznap send generates warnings; yboetz/pyznap#22

Closed

bndabbs added a commit to rocknsm/homebrew-taps that referenced this issue Mar 18, 2019

Add custom Ansible with cryptograph 2.4.2

c61c3e7

Workaround until paramiko/paramiko#1369 is fully merged upstream

auneri added a commit to auneri/ipyslurm that referenced this issue Apr 4, 2019

Filter cryptography deprecation warnings

d85c004

See paramiko/paramiko#1369.

roscisz mentioned this issue Apr 18, 2019

Feature/create local user roscisz/TensorHive#169

Merged

pellcorp mentioned this issue Apr 29, 2019

sftp client Aiven-Open/pghoard#337

Merged

ploxiln pushed a commit to ploxiln/paramiko-ng that referenced this issue May 1, 2019

fix cryptography 2.5+ deprecation warnings for ECDH encode_point()

2fc164d

Fixes paramiko#1369 port of paramiko#1379

ploxiln pushed a commit to ploxiln/paramiko-ng that referenced this issue May 1, 2019

fix cryptography 2.5+ deprecation warnings for ECDH encode_point()

19aa0c6

Fixes paramiko#1369 port of paramiko#1379

kabirbaidhya mentioned this issue May 8, 2019

Resolve deprecation errors due to paramiko's cryptography dependency version and the cwd issue on run() function kabirbaidhya/boss#154

Merged

ploxiln mentioned this issue May 10, 2019

Limit the cryptography package version fabric/fabric#1976

Open

angry-bender mentioned this issue May 20, 2019

Output File does not appear to be working (Outside Docker) Rhynorater/CVE-2018-15473-Exploit#19

Closed

michaelbilow mentioned this issue Jun 6, 2019

issho recipe conda-forge/staged-recipes#8505

Merged

5 tasks

pymonger added a commit to sdskit/sdscli that referenced this issue Jun 17, 2019

remove cryptography pin for paramiko/paramiko#1369

b0cd026

pavelpikta mentioned this issue Sep 30, 2019

Not working with Python3.7 lean-delivery/ansible-role-java#92

Closed

bo-naoki-okamoto mentioned this issue Jan 9, 2020

Upgrade paramko BrainPad/cliboa#27

Closed

AnonymousWebHacker mentioned this issue Apr 1, 2021

Bugfixes on v1.31.0 repos [cryptography] matrix-org/synapse#9722

Closed

Teo-ShaoWei mentioned this issue May 27, 2021

Frequent warning logs due to outdated Paramiko cflee/docker-packer#1

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

CryptographyDeprecationWarnings with cryptography 2.5 release #1369

CryptographyDeprecationWarnings with cryptography 2.5 release #1369

joshsleeper commented Jan 22, 2019

jcea commented Jan 23, 2019

CamiloDFM commented Jan 23, 2019

joshsleeper commented Jan 23, 2019

patrickfish commented Jan 23, 2019

cowlinator commented Jan 25, 2019 •

edited

Loading

bitprophet commented Feb 9, 2019

sjamaan commented Mar 19, 2019

kabirbaidhya commented May 8, 2019

AInteriorB commented May 8, 2019

ninjape commented May 14, 2019

ploxiln commented May 14, 2019

TheSima commented Mar 26, 2020 •

edited

Loading

CryptographyDeprecationWarnings with cryptography 2.5 release #1369

CryptographyDeprecationWarnings with cryptography 2.5 release #1369

Comments

joshsleeper commented Jan 22, 2019

jcea commented Jan 23, 2019

CamiloDFM commented Jan 23, 2019

joshsleeper commented Jan 23, 2019

patrickfish commented Jan 23, 2019

cowlinator commented Jan 25, 2019 • edited Loading

bitprophet commented Feb 9, 2019

sjamaan commented Mar 19, 2019

kabirbaidhya commented May 8, 2019

AInteriorB commented May 8, 2019

ninjape commented May 14, 2019

ploxiln commented May 14, 2019

TheSima commented Mar 26, 2020 • edited Loading

cowlinator commented Jan 25, 2019 •

edited

Loading

TheSima commented Mar 26, 2020 •

edited

Loading