FreeOpcUa/opcua-asyncio

Relax some constraints on dependencies

panicgh opened this issue · 0 comments

I would like to build a opcua-asyncio package for Fedora 40, however the constraints cryptography>42.0.0 and pyOpenSSL>23.2.0 are quite limiting. Are they really needed? Maybe they could be slightly relaxed.
If it is not possible, I will have to stay on asyncua 1.1.0.

pyopenssl

Fedora 40 provides pyopenssl 23.2.0. The constraint for asyncua was added in 8353920 (#1593). In the diff between 23.2.0..23.3.0 is no mention of X509_V_FLAG_NOTIFY_POLICY.

Would it therefore be safe to relax the constraint to pyopenssl>=23.2.0, i.e. the version that is readily available in Fedora 40?

cryptography

Fedora 40 provides cryptography 41.0.7. The constraint for cryptography was introduced in 9aedc20 (#1661). The comment suggests it was necessary because of the use of not_valid_after_utc. But maybe there is a way to support slightly older cryptography?