The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
python3-cryptography for rawhide, python3-cryptography-43.0.0-2.fc41.x86_64, is showing a couple of deprecation warnings. These don't include a "will be removed at version X" which they sometimes do so urgency is difficult to gauge.
From the pkispawn log.
DEBUG: NSSDatabase.get_cert(subsystemCert cert-pki-ca) ends
/usr/lib/python3.13/site-packages/pki/nssdb.py:2070: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib/python3.13/site-packages/pki/nssdb.py:2071: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
DEBUG: NSSDatabase.get_trust(subsystemCert cert-pki-ca)
python3-cryptography for rawhide, python3-cryptography-43.0.0-2.fc41.x86_64, is showing a couple of deprecation warnings. These don't include a "will be removed at version X" which they sometimes do so urgency is difficult to gauge.
From the pkispawn log.
DEBUG: NSSDatabase.get_cert(subsystemCert cert-pki-ca) ends /usr/lib/python3.13/site-packages/pki/nssdb.py:2070: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc. cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before) /usr/lib/python3.13/site-packages/pki/nssdb.py:2071: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc. cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after) DEBUG: NSSDatabase.get_trust(subsystemCert cert-pki-ca)