• Bug#1067062: OpenSSL.crypto.PKCS12 is removed in pyOpenSSL 24.1.0

    From Andrey Rakhmatullin@21:1/5 to All on Sun Mar 17 21:10:01 2024
    Package: salt-common
    Version: 3004.1+dfsg-2.2
    Severity: serious
    Tags: upstream

    salt/modules/tls.py uses OpenSSL.crypto.PKCS12 which was deprecated since pyOpenSSL 23.3.0 and is removed in 24.1.0 which will soon be uploaded to Debian. The issue is not fixed (or reported) upstream as far as I can see. The pyOpenSSL changelog suggests "OpenSSL.crypto.PKCS12 may be replaced by the PKCS#12 APIs in the cryptography package."


    -- System Information:
    Debian Release: trixie/sid
    APT prefers unstable-debug
    APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (500, 'testing'), (101, 'experimental')
    Architecture: amd64 (x86_64)
    Foreign Architectures: i386

    Kernel: Linux 6.7.9-amd64 (SMP w/4 CPU threads; PREEMPT)
    Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
    Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE not set
    Shell: /bin/sh linked to /usr/bin/dash
    Init: systemd (via /run/systemd/system)
    LSM: AppArmor: enabled

    Versions of packages salt-common depends on:
    ii iproute2 6.8.0-1
    ii python3 3.11.8-1
    ii python3-apt 2.7.6+b1
    ii python3-dateutil 2.8.2-3
    ii python3-distro 1.9.0-1
    ii python3-jinja2 3.1.3-1
    ii python3-markupsafe 2.1.5-1
    ii python3-msgpack 1.0.3-3+b1
    ii python3-pkg-resources 68.1.2-2
    ii python3-psutil 5.9.8-2
    ii python3-pycryptodome 3.20.0+dfsg-1
    ii python3-requests 2.31.0+dfsg-1
    ii python3-yaml 6.0.1-2
    pn python3-zmq <none>

    Versions of packages salt-common recommends:
    ii lsb-release 12.0-2
    pn python3-croniter <none>

    Versions of packages salt-common suggests:
    ii python3-mako 1.3.2-1
    pn salt-doc <none>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)