With the upgrade of python-cryptography in f33+, the PKCS7_get0_clients api was dropped. It has been replaced by a cleaner and easier api, which roca-detect now uses.
The consequence was that PKCS7 keys would be silently ignored. To test, run
$ roca-detect /usr/lib/python3.*/site-packages/roca/tests/data/pkcs701.p7s
It should see 1 PKCS7 key.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2021-acd448b558Please login to add feedback.
This update has been submitted for testing by sdgathman.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'ignored'.
This update has been pushed to testing.
This update can be pushed to stable now if the maintainer wishes
This update has been submitted for stable by bodhi.
This update has been pushed to stable.