#52 migrate from pyOpenSSL to cryptography
Closed 2 years ago by tdawson. Opened 2 years ago by carlwgeorge.

From the pyOpenSSL README:

Note: The Python Cryptographic Authority strongly suggests the use of pyca/cryptography where possible. If you are using pyOpenSSL for anything other than making a TLS connection you should move to cryptography and drop your pyOpenSSL dependency.

The only pyOpenSSL usage I see in centpkg is OpenSSL.crypto.load_certificate() and a few methods from the resulting OpenSSL.crypto.X509 object. The cryptography API is not identical, but at a quick glance it appears to have equivalent functions and methods. We should follow the upstream guidance and switch to cryptography.

This was suggested in my request to add pyOpenSSL to EPEL9. I opened that to accomplish my end goal of adding centpkg to EPEL9.


One additional note, our current usage of pyOpenSSL works across:

  • pyOpenSSL 0.13.1 (el7)
  • pyOpenSSL 19.0.0 (el8)
  • pyOpenSSL 21.0.0 (f34+)

Since centpkg is provided in multiple EPEL and Fedora branches, we should ensure that any usage of cryptography works across the provided versions of that library. For posterity those versions are:

  • cryptography 1.7.2 (el7)
  • cryptography 3.2.1 (el8)
  • cryptography 3.4.6 (f34)
  • cryptography 3.4.7 (el9 and f35)
  • cryptography 36.0.0 (f36)

Metadata Update from @tdawson:
- Issue tagged with: Feature Request

2 years ago

The pull request has been merged, but a new release hasn't been made.
I'll close this when the release has been made and released.

This should be fixed in centpkg 0.6.8 which is currently in fedora and epel-testing.

centpkg 0.6.8, which fixes this issue is in stable.

Metadata Update from @tdawson:
- Issue status updated to: Closed (was: Open)

2 years ago

Log in to comment on this ticket.

Metadata
Related Pull Requests
  • #53 Merged 2 years ago