Skip site navigation (1)Skip section navigation (2) 
Date:      Sat, 02 Sep 2023 04:27:30 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 273508] dns/py-dnspython: RuntimeError: OpenSSL 3.0's legacy provider failed to load.
Message-ID:  <bug-273508-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D273508

            Bug ID: 273508
           Summary: dns/py-dnspython: RuntimeError: OpenSSL 3.0's legacy
                    provider failed to load.
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: bofh@freebsd.org
          Reporter: dan.kotowski@a9development.com
             Flags: maintainer-feedback?(bofh@freebsd.org)
          Assignee: bofh@freebsd.org

Something about the OpenSSL 3.0 upgrade and this is causing downstream fall=
out
(see 273146)

$ pkg query "%o %v" | grep dnspython
dns/py-dnspython 2.4.2,1

$ python3 -c "import dns.resolver" && echo ok
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/local/lib/python3.9/site-packages/dns/resolver.py", line 30, in
<module>
    import dns._ddr
  File "/usr/local/lib/python3.9/site-packages/dns/_ddr.py", line 12, in
<module>
    import dns.nameserver
  File "/usr/local/lib/python3.9/site-packages/dns/nameserver.py", line 5, =
in
<module>
    import dns.asyncquery
  File "/usr/local/lib/python3.9/site-packages/dns/asyncquery.py", line 32,=
 in
<module>
    import dns.quic
  File "/usr/local/lib/python3.9/site-packages/dns/quic/__init__.py", line =
4,
in <module>
    import aioquic.quic.configuration  # type: ignore
  File "/usr/local/lib/python3.9/site-packages/aioquic/quic/configuration.p=
y",
line 6, in <module>
    from ..tls import (
  File "/usr/local/lib/python3.9/site-packages/aioquic/tls.py", line 40, in
<module>
    from OpenSSL import crypto
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/__init__.py", line 8=
, in
<module>
    from OpenSSL import SSL, crypto
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/SSL.py", line 9, in
<module>
    from OpenSSL._util import (
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/_util.py", line 6, in
<module>
    from cryptography.hazmat.bindings.openssl.binding import Binding
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openss=
l/binding.py",
line 167, in <module>
    Binding.init_static_locks()
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openss=
l/binding.py",
line 134, in init_static_locks
    cls._ensure_ffi_initialized()
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openss=
l/binding.py",
line 123, in _ensure_ffi_initialized
    _legacy_provider_error(cls._legacy_provider_loaded)
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openss=
l/binding.py",
line 43, in _legacy_provider_error
    raise RuntimeError(
RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal
error by default, but cryptography supports running without legacy algorith=
ms
by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you =
did
not expect this error, you have likely made a mistake with your OpenSSL
configuration.

$ env CRYPTOGRAPHY_OPENSSL_NO_LEGACY=3D1 python3 -c "import dns.resolver" &=
& echo
ok
ok

--=20
You are receiving this mail because:
You are the assignee for the bug.=

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-273508-7788>