With the upgrade of python-cryptography in f33+, the PKCS7_get0_clients api was dropped. It has been replaced by a cleaner and easier api, which roca-detect now uses.
The consequence was that PKCS7 keys would be silently ignored. To test, run
$ roca-detect /usr/lib/python3.*/site-packages/roca/tests/data/pkcs701.p7s
It should see 1 PKCS7 key.
sudo dnf upgrade --refresh --advisory=FEDORA-2021-acd448b558
Please login to add feedback.