From nobody Thu May 30 13:04:06 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Vqmfc2pf3z5McNW; Thu, 30 May 2024 13:04:08 +0000 (UTC) (envelope-from mandree@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Vqmfc1rS2z4X9r; Thu, 30 May 2024 13:04:08 +0000 (UTC) (envelope-from mandree@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1717074248; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=KsCgalKVrcA+KIjuDusnkV6TfF2NFnZZr9R48LD7pBk=; b=RArJiomT5nXbrq8Fx4BsXGCF8eut1Tm0tSl3bxRvmkp6YpLQ8c2Zp4Lx6ka6Z3yCyebHur Y3uFKn2jTnHHcb9ZwJylsKSyIHi3z0xjudSIgGwk8aBzoxWUgU6RhOMOusPh9B7UITGaqg ZSzdInOKTwMFer65lSccry784NXfTURwuxUH/zfTqGy748eYnqMhk/vaQSd0f0QSD1vCcc +CmztmjmNNGdTpUZw/2P1xM0XJhscSgE8xIfdoj1KQrJsZrkON3ldnuKOFlw/Sp71wYmgH MKZsI5wF9Y594YuNEQFJTqlCFQHIdiFNPqHoxsFVgXVDId3uChddY0GYPN1GLQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1717074248; a=rsa-sha256; cv=none; b=xk/G5wkplf0/fMW2TTn018j6juCXwizKRZgyymf1YyOlrXtma0Ya/lay1kcqFepOnscTXw teOzSl2Hm47iyqwpb+jJmrRou+C7NWRVN0saiH6QKQGzEPu96XW9Sp0JTDoMoKrq+OGgMQ lNORIE8qOM7uIRVKyDHrB388J8yKO/L9Nthe/ZBhu2I7F6FmHcjFt6IahaMSZuVXadwU7k pZh6cotzAhThSQophnzjUoIBW51daMsk9gbzVfGdq5JfMCKIuH/EnGqV0k/GxnsUMD/+EW 94Ai278aqxl8XbImxAScgvGaJzrLTReaOZxIw0LF2+vVzzTe7nnumr1lY6esHw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1717074248; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=KsCgalKVrcA+KIjuDusnkV6TfF2NFnZZr9R48LD7pBk=; b=peJcwBD7OExuVmYR6EUgvKi3D7UZ1Wts3V3xOFd/6bnKUpWECZxq8C8ffrIQqKO4OW1rQV V2urWwfu97q6RZHCnceqWuVW+cXLWLQiGQo8vhaLL2poBfZ2WHiIcHotgf1OGzchnOPedi +n7yW/dlV9R2oJ+wbgwHPaGbK4UhGht1vnNBjOrpV9gC8p/sDHXlyYuAqenzFxByREcO0n q/u6oKpv3kdhQh0hCizHjz4eaWh62Ulxm/E4IojOqmojcO22Izbwu/3Z5W5/UY+qSzBR4f ZFVju+vuY3VDuaebfa/Stl4Pbl35O4maQTubyv2w3mW4ZMVWNtEzWy5N2/BrWg== Received: from mandree.no-ip.org (p54a038b2.dip0.t-ipconnect.de [84.160.56.178]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: mandree/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4Vqmfc0LYFzfGt; Thu, 30 May 2024 13:04:08 +0000 (UTC) (envelope-from mandree@FreeBSD.org) Received: from [127.0.0.1] (localhost [127.0.0.1]) by ryzen.an3e.de (Postfix) with ESMTP id 9BBAD1C9A29A; Thu, 30 May 2024 15:04:06 +0200 (CEST) Message-ID: Date: Thu, 30 May 2024 15:04:06 +0200 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Matthias Andree Subject: Re: git: 403f201a1461 - main - security/py-cryptography-legacy: fix OpenSSL >= 3.0 compat To: Vladimir Druzenko Cc: dev-commits-ports-main@FreeBSD.org, ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org References: <202405300959.44U9xTWw057983@gitrepo.freebsd.org> <5e022f71-6078-4b90-9299-66a019448f73@FreeBSD.org> <633e774b-52d7-466b-b657-ec05d21acb55@freebsd.org> Content-Language: en-US Organization: FreeBSD.org In-Reply-To: <633e774b-52d7-466b-b657-ec05d21acb55@freebsd.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Am 30.05.24 um 14:59 schrieb Vladimir Druzenko: > 30.05.2024 13:49, Matthias Andree пишет: >> Am 30.05.24 um 11:59 schrieb Matthias Andree: >>> The branch main has been updated by mandree: >>> >>> URL: >>> https://cgit.FreeBSD.org/ports/commit/?id=403f201a1461fd26f026f2c8d3e67f1481908362 >>> >>> commit 403f201a1461fd26f026f2c8d3e67f1481908362 >>> Author:     Matthias Andree >>> AuthorDate: 2024-05-30 09:48:22 +0000 >>> Commit:     Matthias Andree >>> CommitDate: 2024-05-30 09:53:54 +0000 >>> >>>      security/py-cryptography-legacy: fix OpenSSL >= 3.0 compat >>>           py-cryptography-legacy still references functions that have >>> been >>>      removed in OpenSSL 3.0, and fails to load openssl.abi3.so at >>> run-time because >>>      it lacks ERR_GET_FUNC (reported) and FIPS_mode (masked by first >>> error), >>>      and later because py-openssl feeds our utils/deprecated() an >>>      unsupported name= keyword argument. >>> https://www.openssl.org/docs/man3.0/man7/migration_guide.html >>>      is the basis for fixes #1 and #2 >>>           removed, because OpenSSL 3.0 removed function codes from >>> the error. >>>      In our own binding, leave the err_func attribute in, but set it >>>      to a constant 0. >>>      (patch-src___cffi* and patch-*binding.py) >> >> ... sorry for the botched commit log message. The one in 2024Q2 is >> formatted in a readable manner. > > Hello! > > I understand correctly that the patch fixes compatibility with > security/py-openssl 23+? > > Thanks for your work! I have tested that "certbot renew" runs for me with py311-certbot-2.10.0,1 py311-cryptography-legacy-3.4.8_3,1 py311-openssl-23.2.0,1 and should cover other failures if you have a backtrace where py-openssl calls into some utils.deprecated function complaining about an unsupported keyword argument for "name". -- Matthias Andree FreeBSD ports committer