]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
python-common/cryptotools: stop using the removed X509Req API 69446/head
authorKefu Chai <k.chai@proxmox.com>
Sat, 13 Jun 2026 01:50:09 +0000 (09:50 +0800)
committerKefu Chai <k.chai@proxmox.com>
Sat, 13 Jun 2026 02:05:28 +0000 (10:05 +0800)
commit1dda56b1a00a6cbf520d932332ff097716ab256e
tree333e32b0158af9a60b783717cf84299e0544bfa0
parent84ac1de6438cf1de3eabf19206b0bef5ef6f758d
python-common/cryptotools: stop using the removed X509Req API

pyOpenSSL deprecated OpenSSL.crypto.X509Req in 24.2.0 (2024-07-20) and
removed it in 26.3.0 (2026-06-12). as we don't pin pyopenssl, CI picked
up the new release, and create_self_signed_cert() started failing with:

  AttributeError: module 'OpenSSL.crypto' has no attribute 'X509Req'

this took down run-tox-mgr, run-tox-mgr-dashboard-py3 and the mypy check.

we only used X509Req to build a subject name and then copied it into the
X509 cert. so drop it, and set the subject on the cert directly. the
resulting cert stays the same: subject from dname, issuer set to the same
subject, self-signed.

Fixes: https://tracker.ceph.com/issues/77391
Signed-off-by: Kefu Chai <k.chai@proxmox.com>
src/python-common/ceph/cryptotools/internal.py