dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
374 stars 138 forks source link

python-cryptography deprecation warnings #4814

Closed rcritten closed 1 week ago

rcritten commented 3 months ago

python3-cryptography for rawhide, python3-cryptography-43.0.0-2.fc41.x86_64, is showing a couple of deprecation warnings. These don't include a "will be removed at version X" which they sometimes do so urgency is difficult to gauge.

From the pkispawn log.

DEBUG: NSSDatabase.get_cert(subsystemCert cert-pki-ca) ends /usr/lib/python3.13/site-packages/pki/nssdb.py:2070: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc. cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before) /usr/lib/python3.13/site-packages/pki/nssdb.py:2071: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc. cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after) DEBUG: NSSDatabase.get_trust(subsystemCert cert-pki-ca)

edewata commented 3 months ago

https://issues.redhat.com/browse/RHCS-5235

edewata commented 1 week ago

This is fixed in master branch: