search

openstack-charmers / zaza

A Python3-only functional test framework for Charms
Apache License 2.0
11 stars 47 forks source link

[Tracking][security] cryptography is pinned < 3.4 due to rust; needs resolving over time #421

Open ajkavanagh opened 3 years ago

ajkavanagh commented 3 years ago

Recent (>=3.4) versions of python cryptography now ship with rust code for some of the operations. This breaks in some scenarios (e.g. https://github.com/openstack-charmers/zaza-openstack-tests/pull/369).

However, we do not want to remain pinned for long as it is a security related module. The main issue is rust builds for charms.reactive charms which needs a build for each platform. Or we need to NOT have the rust code.

Related: #420 pins to <3.4 in zaza.

lourot commented 3 years ago

Temporary pinning here as well: