[BUG]: OpenSSL version warning

l3ender commented 9 months ago

Is there an existing issue for this?

[X] I have searched the existing issues

Description of the bug

When running any snyk-tags command, the following warning is outputted:

-> snyk-tags ...
/Users/ross/repos/snyk-tags-tool/venv/lib/python3.9/site-packages/urllib3/__init__.py:34: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020
  warnings.warn(
...

Steps To Reproduce

I installed the latest snyk-tags into a python virtual environment and am seeing the issue.

Additional Information

Please see the following for additional system info. I am using an M1 Mac.

(venv) ------------------------------------------------
[ross@Webs-MacBook-Pro.local] ~/repos/snyk-tags-tool
-> snyk-tags --version
/Users/ross/repos/snyk-tags-tool/venv/lib/python3.9/site-packages/urllib3/__init__.py:34: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020
  warnings.warn(
snyk-tags v2.2.1

(venv) ------------------------------------------------
[ross@Webs-MacBook-Pro.local] ~/repos/snyk-tags-tool
-> openssl version
OpenSSL 3.1.2 1 Aug 2023 (Library: OpenSSL 3.1.2 1 Aug 2023)

(venv) ------------------------------------------------
[ross@Webs-MacBook-Pro.local] ~/repos/snyk-tags-tool
-> which openssl
/opt/homebrew/bin/openssl

(venv) ------------------------------------------------
[ross@Webs-MacBook-Pro.local] ~/repos/snyk-tags-tool
-> ll `which openssl`
lrwxr-xr-x  1 ross  admin  37 Aug 13 14:56 /opt/homebrew/bin/openssl -> ../Cellar/openssl@3/3.1.2/bin/openssl

(venv) ------------------------------------------------
[ross@Webs-MacBook-Pro.local] ~/repos/snyk-tags-tool
-> python --version
Python 3.9.6

(venv) ------------------------------------------------
[ross@Webs-MacBook-Pro.local] ~/repos/snyk-tags-tool
-> sw_vers
ProductName:        macOS
ProductVersion:     14.2
BuildVersion:       23C64

EricFernandezSnyk commented 8 months ago

Hi @l3ender I was unable to reproduce this bug with the 'default' installation. It seems to be picking your openssl 3 which will give the warning. For the venv you would need to have openssl 1. Thanks!

l3ender commented 7 months ago

Thanks for the response.

Will the tool be updated to use the openssl 3?

snyk-labs / snyk-tags-tool