Bug 2061849 - RFE: drop use of python-crypto
Summary: RFE: drop use of python-crypto
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: totpcgi
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Kevin Fenzi
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-03-08 16:16 UTC by Paul Howarth
Modified: 2022-03-15 03:51 UTC (History)
3 users (show)

Fixed In Version: totpcgi-0.6.0-0.12.20190713git.fc37
Clone Of:
Environment:
Last Closed: 2022-03-15 03:51:50 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Paul Howarth 2022-03-08 16:16:21 UTC
Description of problem:

totpcgi currently has a runtime dependency on python3-crypto, which I maintain in Fedora. Upstream of this package (https://www.pycrypto.org/) has long since stopped maintaining it and I would like to drop it from Fedora.

Upstream of totpcgi has already switched to python-pycryptodome (see requirements.txt) but this cannot currently be packaged in Fedora because it would conflict with python-crypto due to it using the same namespace. However, python-pycryptodomex, which uses the "Cryptodome" rather than the "Crypto" namespace is available in Fedora and could be used. To use pycryptodomex, all that should be necessary is to change (in totpcgi/utils.py):

from Crypto.Cipher import AES
to:
from Cryptodome.Cipher import AES

and change the dependency from python3-crypto to python3-pycryptodomex.

Please consider applying such a change in Fedora so that python-crypto gets nearer to being able to be retired.

Comment 1 Kevin Fenzi 2022-03-15 03:45:21 UTC
Sounds reasonable to me.

Comment 2 Fedora Update System 2022-03-15 03:50:27 UTC
FEDORA-2022-d6ba154ab4 has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-d6ba154ab4

Comment 3 Fedora Update System 2022-03-15 03:51:50 UTC
FEDORA-2022-d6ba154ab4 has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.