SLES12SP4 python-cryptography dependency issue
srbarrios opened this issue · 2 comments
srbarrios commented
Related to https://github.com/SUSE/spacewalk/issues/13314
By default in our official image, from sumaform, we have pre-installed:
python-cryptography-1.3.1-7.10.1.x86_64
That results on this issue, at boostrap:
From cffi callback <function ssl_verify_callback at 0x7f3797639488>:
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/OpenSSL/SSL.py", line 214, in wrapper
_lib.X509_up_ref(x509)
AttributeError: 'module' object has no attribute 'X509_up_ref'
An error has occurred:
rhn-plugin: The SSL certificate failed verification.
See /var/log/up2date for more information
But in our repos we have the proper version 2.1.4:
zypper actually display the correct version is also available
--+----------------------+------------+--------------+--------+---------------
v | python-cryptography | package | 2.1.4-7.28.2 | x86_64 | os_update_repo
v | python-cryptography | package | 1.7.2-7.24.1 | x86_64 | os_update_repo
v | python-cryptography | package | 1.3.1-7.13.4 | x86_64 | os_update_repo
i | python-cryptography | package | 1.3.1-7.10.1 | x86_64 | os_pool_repo
We need to figure out which is the package that depends on python-cryptography, to evaluate a proper solution.
For now, we did a workaround to upgrade this package manually before we start the bootstrap.
- We need to see if we want to document this manual step in our official documentation
- We need to evalute the possibility to upgrade it on the boostrap stage, instead of manually.
Bischoff commented
The workaround does not work anymore:
[2021-05-25T17:45:11.354Z] module.sles12sp4-client.module.client.module.host.null_resource.provisioning[0]
(remote-exec): 31m Comment: The following packages failed to update: python-cryptography`
Furthermore, it is not okay to hide a product problem in sumaform. I prefer it to fail in the test suite.
I'll do a PR to remove the hack.
Bischoff commented
Not a sumaform issue, closing.