aiidateam / aiida-core

The official repository for the AiiDA code
https://aiida-core.readthedocs.io
Other
437 stars 192 forks source link

CryptographyDeprecationWarning thrown by paramiko when cryptography >= 43.0.0 #6558

Closed ahkole closed 3 months ago

ahkole commented 3 months ago

Describe the bug

Paramiko throws a CryptographyDeprecationWarning when the installed cryptography module has version >= 43.0.0. This warning is visible in the output of verdi status commands (i.e. verdi status or verdi daemon status). Potentially also visible in other command outputs or when importing certain aiida modules, I have not checked this exhaustively. The paramiko developers are aware of this and have (very) recently released a fix in version 3.4.1. However, the current dependency in aiida on paramiko lists paramiko~=2.7,>=2.7.2 so an older version gets installed. See also https://github.com/paramiko/paramiko/issues/2419 . This issue is not breaking or critical, but nevertheless very annoying. Therefore, ideally you would consider upping the dependency on paramiko. Or if this is not possible, to then suppress these warnings when importing paramiko inside aiida code (see examples in the linked paramiko issue).

Steps to reproduce

  1. Install aiida-core together with cryptography >= 43.0.0
  2. Run verdi status

Expected behavior

No deprecation warnings from paramiko when running aiida or importing its modules.

Your environment