[all] Switch to python3-pycryptodome
Hi, A number of bug reports have been filled against the Debian OpenStack packages in Sid: - keystone - python-openstackclient - python-manilaclient - python-ironic-lib - python-oauth2client - python-pysaml2 The content of the bugs is:
Source: python-pysaml2 Version: 4.5.0-8 Severity: important Tags: sid bullseye Usertags: pycrypto
Dear maintainer,
python-pysaml2 currently Build-Depends or Depends on python3-crypto from PyCrypto. This project is no longer maintained and PyCryptodome (https://www.pycryptodome.org/en/latest/) provides a drop in replacement. Please switch to python3-pycryptodome. I'd like to remove python-crypto before the release of bullseye.
Cheers
So my question is: - Is it really a drop-in replacement, and can it be replaced in the packages (maybe, delta the imports?)? - If not, how much work is this? - Can the OpenStack project also move to pycryptodome? Cheers, Thomas Goirand (zigo)
Thomas Goirand wrote:
[...] So my question is: - Is it really a drop-in replacement, and can it be replaced in the packages (maybe, delta the imports?)? - If not, how much work is this? - Can the OpenStack project also move to pycryptodome?
Hmm, I don't think we depend on python3-crypto at all... We depend on pysaml2, but I don't think it depends on python3-crypto either. Looking at sid's python3-pysaml2 4.5.0-8 (there is no python-pysaml2 in sid) it appears to have a Depends on python3-cryptography, which is not the same thing as python3-crypto, and looks fully maintained: https://pypi.org/project/cryptography/ Maybe those bug reports were filed by someone blindly grepping for python3-crypto ? -- Thierry Carrez (ttx)
participants (2)
-
Thierry Carrez
-
Thomas Goirand