greenbone / gvm-tools

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance
https://greenbone.github.io/gvm-tools/
GNU General Public License v3.0
162 stars 89 forks source link

gvm-cli Python cryptography deprecation warning #1131

Open schleyk opened 1 month ago

schleyk commented 1 month ago

Expected behavior

no CryptographyDeprecationWarning

Current behavior

CryptographyDeprecationWarning for any gvm-cli usage.

Steps to reproduce

gvm-cli --version /opt/venv/lib/python3.11/site-packages/paramiko/pkey.py:100: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from this module in 48.0.0. "cipher": algorithms.TripleDES, /opt/venv/lib/python3.11/site-packages/paramiko/transport.py:259: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from this module in 48.0.0. "class": algorithms.TripleDES, gvm-cli 24.7.0 (API version 24.7.0)

GVM versions

gvm-cli --version gvm-cli 24.7.0 (API version 24.7.0)

python -V Python 3.11.2

pip list Package Version bcrypt 4.2.0 cffi 1.16.0 cryptography 43.0.0 gvm-tools 24.7.0 lxml 5.2.2 paramiko 3.4.0 pip 23.0.1 pycparser 2.22 PyNaCl 1.5.0 python-gvm 24.7.0 setuptools 66.1.1

Environment

Docker Container FROM mcr.microsoft.com/dotnet/aspnet:8.0 RUN apt update && apt-get install -y openssl python3 python3-pip python3-venv RUN python3 -m venv /opt/venv ENV PATH="/opt/venv/bin:$PATH" RUN pip install gvm-tools

Logfiles

not relevant
schleyk commented 1 month ago

workaround:

pip install cryptography==42.0.8