Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 25 Mar 2019 15:09:47 +1100
From:      Kubilay Kocak <koobs@FreeBSD.org>
To:        Xavier <xavier@groumpf.org>, FreeBSD Ports ML <freebsd-ports@freebsd.org>
Cc:        "Danilo G. Baio" <dbaio@FreeBSD.org>, python <python@FreeBSD.org>
Subject:   Re: Warning in duplicity after py2-cryptograph update
Message-ID:  <ae4366dc-1c89-7214-89f8-549ca63c015e@FreeBSD.org>
In-Reply-To: <647016e2-a668-6480-b695-f23a36360329@groumpf.org>
References:  <647016e2-a668-6480-b695-f23a36360329@groumpf.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 24/03/2019 8:34 pm, Xavier wrote:
> Hi everyone,
> 
> Since last update of python modules py27-cryprography and
> py27-matplotlib, duplicity emits a warning :
> 
>> CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
> 
> Should I file a PR ?

A particular method was deprecated in the Python cryptography package, 
in 2.5. See the last entry in:

https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#25---2019-01-22

The issue is not related to matplotlib. sysutils/duplicity uses 
security/paramiko, which already has a bug reported for the issue:

https://github.com/paramiko/paramiko/issues/1369

./koobs



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ae4366dc-1c89-7214-89f8-549ca63c015e>