Update to python-cryptography-v43.0.0
Automatic update for pyOpenSSL-24.1.0-10.fc41.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2024-f62eda62b5Please log in to add feedback.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'failed'.
This breaks FreeIPA because it has a class
ipalib.x509.IPACertificatethat inherits from the cryptography abstract base classcryptography.x509.Certificate, and that class added a new abstract method in this release,public_key_algorithm_oid(see https://github.com/pyca/cryptography/pull/10517 ). That breaks anything which tries to instantiate anIPACertificate. We need a new build of freeipa with that method added toIPACertificate, either in the same update as the python-cryptography update, or to go stable before this update goes stable.Looks like upstream freeipa is already aware.
Okay, nice that CI caught this.
Do I need to unpush this, or can they build into this side tag when they're ready and then it'll rerun the tests and push?
no need to unpush, additional builds can be added to the side tag (or it's fine for freeipa to just get updated first, then we can re-run the tests on this).
additionally, this is missing a rebuild of python3-pyOpenSSL:
Problem: problem with installed package - installed package python3-pyOpenSSL-24.1.0-3.fc41.noarch requires (python3.13dist(cryptography) < 43~~ with python3.13dist(cryptography) >= 41.0.5), but none of the providers can be installed
jcline edited this update.
New build(s):
Karma has been reset.
This update has obsoleted pyOpenSSL-24.1.0-10.fc41, and has inherited its bugs and notes.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'failed'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'failed'.
Still missing a build of FreeIPA adapted to the changes in python-cryptography.
We are rebuilding FreeIPA in a separate sidetag because it needs also be changed for slapi-nis changes. So we have to combine two sidetags together. At this point, F41 branching has already happened, so the builds from this request became kind of obsolete.
I'd prefer if we just drop this update after rebuilding everything in f42-build-side-94424 and then I can submit a new bodhi update.
@adamwill I submitted FEDORA-2024-42d8c5bd2d for Rawhide. It includes rawhide (f42) rebuilds of the packages from this update and slapi-nis/freeipa builds.
After discussiong with @decathorpe, I think we'll also add a custom freeipa build here to complete python-cryptography migration.
decathorpe edited this update.
New build(s):
Karma has been reset.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'passed'.
@adamwill can we push forward this update? It got caught inbetween freezes and now has both karma and time push disabled while other f41 updates immediately go to stable.
jcline edited this update.
This update has been submitted for stable by bodhi