On 3/29/21 2:21 PM, Stuart Henderson wrote:
On 2021/03/29 09:12, Renaud Allard wrote:Hello, Here is almost the same patch to upgrade net/synapse to 1.30.0 but which includes a modification to the rc script which was broken since 1.29.0 v1.30.1 currently needs py-cryptography>=3.4.7. That to ensure this library is recent enough to have the openssl fix. Since OpenBSD's libressl is not affected, this is not an issue right now, but could be an issue for later versions.If that's the only thing it needs from 3.4.7, then just patch the requirement string, no point holding back on the Matrix update just for that.
That's what I was going to do as this 3.4.7 requirement is useless for us anyway.
In order to update to py-cryptography-3.4+ we need to either remove or update Python 2 ports depending on cryptography; - mail/mailpile (looks like 1.0.0rc6 only needs small tweaks to support py3; https://github.com/mailpile/Mailpile/issues/160) - security/py-paramiko, used by: - devel/bzr (py2-only; could be replaced by https://www.breezy-vcs.org/) - net/py-boto, used by sysutils/google-compute-engine (outdated, looks like it should be replaced with google-guest-agent) - sysutils/fabric (outdated, new v supports py3) (there were more, but I have just removed a few). and also figure out how to get setuptools-rust working.
Yes, I looked at upgrading py-cryptography and this is indeed not a straightforward upgrade.
smime.p7s
Description: S/MIME Cryptographic Signature
