Bug 2355193 - Please update pyOpenSSL to 25.x in epel10.0 and epel10
Summary: Please update pyOpenSSL to 25.x in epel10.0 and epel10
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: pyOpenSSL
Version: epel10
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Paul Wouters
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2325246
TreeView+ depends on / blocked
 
Reported: 2025-03-26 22:09 UTC by Jonathan Wright
Modified: 2025-09-07 04:25 UTC (History)
5 users (show)

Fixed In Version: pyOpenSSL-25.0.0-1.el10_1
Clone Of:
Environment:
Last Closed: 2025-05-09 03:16:39 UTC
Type: Bug
Embargoed:
fedora-admin-xmlrpc: mirror+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FC-1540 0 None None None 2025-03-26 22:10:06 UTC

Description Jonathan Wright 2025-03-26 22:09:26 UTC
Howdy,

Can you update pyOpenSSL in epel10.0 and epel10 branches to 25.0.0?  certbot 3.2 has upped its new baseline requirement for pyOpenSSL to >= 25 and I don't want to start certbot in EPEL10 on an outdated version.

There is a small breaking change in removing some long-deprecated functions: https://www.pyopenssl.org/en/latest/changelog.html#id3

I wouldn't expect this to pose an issue for any packages.

Comment 1 Clemens Lang 2025-04-10 10:30:29 UTC
Can certbot not use pyca/cryptography instead? pyOpenSSL comes with this warning for a while now:

> The Python Cryptographic Authority strongly suggests the use of pyca/cryptography where possible. If you are using pyOpenSSL for anything other than making a TLS connection you should move to cryptography and drop your pyOpenSSL dependency.

Comment 2 Jonathan Wright 2025-04-11 17:29:19 UTC
(In reply to Clemens Lang from comment #1)
> Can certbot not use pyca/cryptography instead? pyOpenSSL comes with this
> warning for a while now:
> 
> > The Python Cryptographic Authority strongly suggests the use of pyca/cryptography where possible. If you are using pyOpenSSL for anything other than making a TLS connection you should move to cryptography and drop your pyOpenSSL dependency.

It uses both.  They're even explicit about changelogs when the requirements got bumped up: https://github.com/certbot/certbot/releases/tag/v3.2.0

The certbot-nginx component needs both.  If it were a DNS module or something I'd be fine with not shipping it in EPEL10, but since nginx is a core package for EL10 I feel that we should ship the certbot nginx module in EPEL10.

Comment 3 Jonathan Wright 2025-04-21 18:09:50 UTC
Are you willing to build this update for EPEL10 ?

Comment 4 Clemens Lang 2025-04-22 10:43:17 UTC
(In reply to Jonathan Wright from comment #3)
> Are you willing to build this update for EPEL10 ?

If you're asking me, then no, I don't have time to address this, but I'm also not the maintainer.

Comment 5 Jonathan Wright 2025-04-30 14:19:36 UTC
(In reply to Clemens Lang from comment #4)
> (In reply to Jonathan Wright from comment #3)
> > Are you willing to build this update for EPEL10 ?
> 
> If you're asking me, then no, I don't have time to address this, but I'm
> also not the maintainer.

It was directed at @paul.wouters

Comment 6 Fedora Update System 2025-04-30 16:38:39 UTC
FEDORA-EPEL-2025-6884410337 (pyOpenSSL-25.0.0-1.el10_1, python-cloudflare-2.19.4-2.el10_1, and 5 more) has been submitted as an update to Fedora EPEL 10.1.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6884410337

Comment 7 Fedora Update System 2025-05-01 03:39:16 UTC
FEDORA-EPEL-2025-6884410337 has been pushed to the Fedora EPEL 10.1 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6884410337

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2025-05-09 03:16:39 UTC
FEDORA-EPEL-2025-6884410337 (certbot-4.0.0-1.el10_1, pyOpenSSL-25.0.0-1.el10_1, and 6 more) has been pushed to the Fedora EPEL 10.1 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Red Hat Bugzilla 2025-09-07 04:25:02 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days


Note You need to log in before you can comment on or make changes to this bug.