[all] Switch to python3-pycryptodome
Hi,
A number of bug reports have been filled against the Debian OpenStack packages in Sid:
- keystone - python-openstackclient - python-manilaclient - python-ironic-lib - python-oauth2client - python-pysaml2
The content of the bugs is:
Source: python-pysaml2 Version: 4.5.0-8 Severity: important Tags: sid bullseye Usertags: pycrypto
Dear maintainer,
python-pysaml2 currently Build-Depends or Depends on python3-crypto from PyCrypto. This project is no longer maintained and PyCryptodome (https://www.pycryptodome.org/en/latest/) provides a drop in replacement. Please switch to python3-pycryptodome. I'd like to remove python-crypto before the release of bullseye.
Cheers
So my question is: - Is it really a drop-in replacement, and can it be replaced in the packages (maybe, delta the imports?)? - If not, how much work is this? - Can the OpenStack project also move to pycryptodome?
Cheers,
Thomas Goirand (zigo)
Thomas Goirand wrote:
[...] So my question is:
- Is it really a drop-in replacement, and can it be replaced in the
packages (maybe, delta the imports?)?
- If not, how much work is this?
- Can the OpenStack project also move to pycryptodome?
Hmm, I don't think we depend on python3-crypto at all...
We depend on pysaml2, but I don't think it depends on python3-crypto either.
Looking at sid's python3-pysaml2 4.5.0-8 (there is no python-pysaml2 in sid) it appears to have a Depends on python3-cryptography, which is not the same thing as python3-crypto, and looks fully maintained:
https://pypi.org/project/cryptography/
Maybe those bug reports were filed by someone blindly grepping for python3-crypto ?
participants (2)
-
Thierry Carrez
-
Thomas Goirand