Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

OpenSSL Deprecation warning #539

Open
tonial opened this issue Oct 15, 2024 · 0 comments · May be fixed by #542 or #543
Open

OpenSSL Deprecation warning #539

tonial opened this issue Oct 15, 2024 · 0 comments · May be fixed by #542 or #543

Comments

@tonial
Copy link

tonial commented Oct 15, 2024

OpenSSL recently added a depreciation warning on some internal methods.

inclusion_connect/oidc_federation/base.py:13: in <module>
    from mozilla_django_oidc import auth, views
../.virtualenv/inclusion-connect/lib/python3.11/site-packages/mozilla_django_oidc/auth.py:14: in <module>
    from josepy.b64 import b64decode
../.virtualenv/inclusion-connect/lib/python3.11/site-packages/josepy/__init__.py:40: in <module>
    from josepy.json_util import (
../.virtualenv/inclusion-connect/lib/python3.11/site-packages/josepy/json_util.py:26: in <module>
    from josepy import b64, errors, interfaces, util
../.virtualenv/inclusion-connect/lib/python3.11/site-packages/josepy/util.py:18: in <module>
    class ComparableX509:
../.virtualenv/inclusion-connect/lib/python3.11/site-packages/josepy/util.py:26: in ComparableX509
    def __init__(self, wrapped: Union[crypto.X509, crypto.X509Req]) -> None:
../.virtualenv/inclusion-connect/lib/python3.11/site-packages/cryptography/utils.py:70: in __getattr__
    warnings.warn(obj.message, obj.warning_class, stacklevel=2)
E   DeprecationWarning: CSR support in pyOpenSSL is deprecated. You should use the APIs in cryptography.
================================= short test summary info =================================
ERROR tests/oidc_federation/test_peama.py - DeprecationWarning: CSR support in pyOpenSSL is deprecated. You should use the APIs in cryptography.

Josepy maintainers are thinking about dropping the library (see certbot/josepy#182 (comment) and certbot/certbot#8322 (comment))

Since https://github.com/latchset/jwcrypto seems to have more commits/releases recently I'll try to replace josepy with it in a PR.

EDIT -> done in #542

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
1 participant