]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
python-common/cryptotools: stop using the removed X509Req API 69709/head
authorKefu Chai <k.chai@proxmox.com>
Sat, 13 Jun 2026 01:50:09 +0000 (09:50 +0800)
committerKefu Chai <k.chai@proxmox.com>
Thu, 25 Jun 2026 07:17:44 +0000 (15:17 +0800)
commitfcb48e0c3af2da39c568716af8cd0eb007232dde
treee950a35b139ed83e19e9e5c605fa0bdc6be227cc
parent3198c5f228a23ecad9bb3bbfc1f748117d180edf
python-common/cryptotools: stop using the removed X509Req API

pyOpenSSL deprecated OpenSSL.crypto.X509Req in 24.2.0 (2024-07-20) and
removed it in 26.3.0 (2026-06-12). as we don't pin pyopenssl, CI picked
up the new release, and create_self_signed_cert() started failing with:

  AttributeError: module 'OpenSSL.crypto' has no attribute 'X509Req'

this took down run-tox-mgr, run-tox-mgr-dashboard-py3 and the mypy check.

we only used X509Req to build a subject name and then copied it into the
X509 cert. so drop it, and set the subject on the cert directly. the
resulting cert stays the same: subject from dname, issuer set to the same
subject, self-signed.

Fixes: https://tracker.ceph.com/issues/77391
Signed-off-by: Kefu Chai <k.chai@proxmox.com>
(cherry picked from commit 1dda56b1a00a6cbf520d932332ff097716ab256e)
src/python-common/ceph/cryptotools/internal.py