aristanetworks / anta

What do you call an ant with frogs legs?
https://anta.arista.com/
Apache License 2.0
46 stars 24 forks source link

Deprecation Warning for TripleDES Algorithm in Paramiko #776

Closed titom73 closed 1 week ago

titom73 commented 1 month ago

After a fresh install, anta cli is printing some warning message related to cryptography:

$ anta --version
/home/user/.pyenv/versions/3.9.6/envs/clab-arista-3.9-single-dc/lib/python3.9/site-packages/asyncssh/crypto/\
   cipher.py:29: CryptographyDeprecationWarning: ARC4 has been moved to cryptography.hazmat.decrepit.ciphers.\
   algorithms.ARC4 and will be removed from this module in 48.0.0.
  from cryptography.hazmat.primitives.ciphers.algorithms import AES, ARC4

/home/user/.pyenv/versions/3.9.6/envs/clab-arista-3.9-single-dc/lib/python3.9/site-packages/asyncssh/crypto/\
   cipher.py:30: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.\
   algorithms.TripleDES and will be removed from this module in 48.0.0.
  from cryptography.hazmat.primitives.ciphers.algorithms import TripleDES

This messages appears when cryptography>=43.0.0 since they started to deprecate some algorithms used by paramiko

Issue is tracked in paramiko and a workaround it to limit cryptography strictly lower than 43.0.0

Origin of message is: asyncssh/674