[Bug 273656] security/py-certbot: needs export CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 in ${LOCALBASE}/etc/periodic/weekly/500.certbot-3.9 on systems with OpenSSL 3

2023-09-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273656

Bug ID: 273656
   Summary: security/py-certbot: needs export
CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 in
${LOCALBASE}/etc/periodic/weekly/500.certbot-3.9 on
systems with OpenSSL 3
   Product: Ports & Packages
   Version: Latest
  Hardware: Any
OS: Any
Status: New
  Severity: Affects Only Me
  Priority: ---
 Component: Individual Port(s)
  Assignee: python@FreeBSD.org
  Reporter: trond.endres...@ximalas.info
 Flags: maintainer-feedback?(python@FreeBSD.org)
  Assignee: python@FreeBSD.org

System is stable/14 as of today. OpenSSL comes from base. Installed version is
py39-certbot-2.6.0,1 built from ports.

# certbot renew --standalone

Traceback (most recent call last):
  File "/usr/local/bin/certbot", line 33, in 
sys.exit(load_entry_point('certbot==2.6.0', 'console_scripts',
'certbot')())
  File "/usr/local/bin/certbot", line 25, in importlib_load_entry_point
return next(matches).load()
  File "/usr/local/lib/python3.9/importlib/metadata.py", line 86, in load
module = import_module(match.group('module'))
  File "/usr/local/lib/python3.9/importlib/__init__.py", line 127, in
import_module
return _bootstrap._gcd_import(name[level:], package, level)
  File "", line 1030, in _gcd_import
  File "", line 1007, in _find_and_load
  File "", line 986, in _find_and_load_unlocked
  File "", line 680, in _load_unlocked
  File "", line 850, in exec_module
  File "", line 228, in _call_with_frames_removed
  File "/usr/local/lib/python3.9/site-packages/certbot/main.py", line 6, in

from certbot._internal import main as internal_main
  File "/usr/local/lib/python3.9/site-packages/certbot/_internal/main.py", line
21, in 
import josepy as jose
  File "/usr/local/lib/python3.9/site-packages/josepy/__init__.py", line 40, in

from josepy.json_util import (
  File "/usr/local/lib/python3.9/site-packages/josepy/json_util.py", line 14,
in 
from OpenSSL import crypto
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/__init__.py", line 8, in

from OpenSSL import SSL, crypto
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/SSL.py", line 9, in

from OpenSSL._util import (
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/_util.py", line 6, in

from cryptography.hazmat.bindings.openssl.binding import Binding
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/binding.py",
line 167, in 
Binding.init_static_locks()
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/binding.py",
line 134, in init_static_locks
cls._ensure_ffi_initialized()
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/binding.py",
line 123, in _ensure_ffi_initialized
_legacy_provider_error(cls._legacy_provider_loaded)
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/binding.py",
line 43, in _legacy_provider_error
raise RuntimeError(
RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal
error by default, but cryptography supports running without legacy algorithms
by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did
not expect this error, you have likely made a mistake with your OpenSSL
configuration.

-- 
You are receiving this mail because:
You are the assignee for the bug.


maintainer-feedback requested: [Bug 273656] security/py-certbot: needs export CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 in ${LOCALBASE}/etc/periodic/weekly/500.certbot-3.9 on systems with OpenSSL 3

2023-09-09 Thread bugzilla-noreply
Bugzilla Automation  has asked freebsd-python (Nobody)
 for maintainer-feedback:
Bug 273656: security/py-certbot: needs export CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1
in ${LOCALBASE}/etc/periodic/weekly/500.certbot-3.9 on systems with OpenSSL 3
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273656



--- Description ---
System is stable/14 as of today. OpenSSL comes from base. Installed version is
py39-certbot-2.6.0,1 built from ports.

# certbot renew --standalone

Traceback (most recent call last):
  File "/usr/local/bin/certbot", line 33, in 
sys.exit(load_entry_point('certbot==2.6.0', 'console_scripts',
'certbot')())
  File "/usr/local/bin/certbot", line 25, in importlib_load_entry_point
return next(matches).load()
  File "/usr/local/lib/python3.9/importlib/metadata.py", line 86, in load
module = import_module(match.group('module'))
  File "/usr/local/lib/python3.9/importlib/__init__.py", line 127, in
import_module
return _bootstrap._gcd_import(name[level:], package, level)
  File "", line 1030, in _gcd_import
  File "", line 1007, in _find_and_load
  File "", line 986, in _find_and_load_unlocked
  File "", line 680, in _load_unlocked
  File "", line 850, in exec_module
  File "", line 228, in _call_with_frames_removed
  File "/usr/local/lib/python3.9/site-packages/certbot/main.py", line 6, in

from certbot._internal import main as internal_main
  File "/usr/local/lib/python3.9/site-packages/certbot/_internal/main.py", line
21, in 
import josepy as jose
  File "/usr/local/lib/python3.9/site-packages/josepy/__init__.py", line 40, in

from josepy.json_util import (
  File "/usr/local/lib/python3.9/site-packages/josepy/json_util.py", line 14,
in 
from OpenSSL import crypto
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/__init__.py", line 8, in

from OpenSSL import SSL, crypto
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/SSL.py", line 9, in

from OpenSSL._util import (
  File "/usr/local/lib/python3.9/site-packages/OpenSSL/_util.py", line 6, in

from cryptography.hazmat.bindings.openssl.binding import Binding
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/bi
nding.py",
line 167, in 
Binding.init_static_locks()
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/bi
nding.py",
line 134, in init_static_locks
cls._ensure_ffi_initialized()
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/bi
nding.py",
line 123, in _ensure_ffi_initialized
_legacy_provider_error(cls._legacy_provider_loaded)
  File
"/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/openssl/bi
nding.py",
line 43, in _legacy_provider_error
raise RuntimeError(
RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal
error by default, but cryptography supports running without legacy algorithms
by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did
not expect this error, you have likely made a mistake with your OpenSSL
configuration.



[package - main-amd64-default][lang/python39] Failed for python39-3.9.18 in configure

2023-09-09 Thread pkg-fallout
You are receiving this mail as a port that you maintain
is failing to build on the FreeBSD package build server.
Please investigate the failure and submit a PR to fix
build.

Maintainer: python@FreeBSD.org
Log URL:
https://pkg-status.freebsd.org/beefy18/data/main-amd64-default/pe88937b01dd4_s3482f57f0f/logs/python39-3.9.18.log
Build URL:  
https://pkg-status.freebsd.org/beefy18/build.html?mastername=main-amd64-default&build=pe88937b01dd4_s3482f57f0f
Log:

=>> Building lang/python39
build started at Sun Sep 10 01:23:15 UTC 2023
port directory: /usr/ports/lang/python39
package name: python39-3.9.18
building for: FreeBSD main-amd64-default-job-01 15.0-CURRENT FreeBSD 
15.0-CURRENT 150 amd64
maintained by: python@FreeBSD.org
Makefile ident: 
Poudriere version: 3.2.8-23-ga7f8d188
Host OSVERSION: 150
Jail OSVERSION: 150
Job Id: 01

---Begin Environment---
SHELL=/bin/sh
OSVERSION=150
UNAME_v=FreeBSD 15.0-CURRENT 150
UNAME_r=15.0-CURRENT
BLOCKSIZE=K
MAIL=/var/mail/root
MM_CHARSET=UTF-8
LANG=C.UTF-8
STATUS=1
HOME=/root
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin
LOCALBASE=/usr/local
USER=root
LIBEXECPREFIX=/usr/local/libexec/poudriere
POUDRIERE_VERSION=3.2.8-23-ga7f8d188
MASTERMNT=/usr/local/poudriere/data/.m/main-amd64-default/ref
POUDRIERE_BUILD_TYPE=bulk
PACKAGE_BUILDING=yes
SAVED_TERM=
PWD=/usr/local/poudriere/data/.m/main-amd64-default/ref/.p/pool
P_PORTS_FEATURES=FLAVORS SELECTED_OPTIONS
MASTERNAME=main-amd64-default
SCRIPTPREFIX=/usr/local/share/poudriere
OLDPWD=/usr/local/poudriere/data/.m/main-amd64-default/ref/.p
SCRIPTPATH=/usr/local/share/poudriere/bulk.sh
POUDRIEREPATH=/usr/local/bin/poudriere
---End Environment---

---Begin Poudriere Port Flags/Env---
PORT_FLAGS=
PKGENV=
FLAVOR=
DEPENDS_ARGS=
MAKE_ARGS=
---End Poudriere Port Flags/Env---

---Begin OPTIONS List---
===> The following configuration options are available for python39-3.9.18:
 DEBUG=off: Build with debugging support
 IPV6=on: IPv6 protocol support
 LIBMPDEC=on: Use libmpdec from ports instead of bundled version
 LTO=off: Use Link-Time Optimization
 NLS=on: Enable gettext support for the locale module
 PYMALLOC=on: Enable specialized mallocs
> Hash Algorithm (PEP-456): you can only select none or one of them
 FNV=off: Modified Fowler-Noll-Vo Algorithm
 SIPHASH=off: SipHash24 Algorithm
===> Use 'make config' to modify these settings
---End OPTIONS List---

--MAINTAINER--
python@FreeBSD.org
--End MAINTAINER--

--CONFIGURE_ARGS--
--enable-shared --without-ensurepip  --with-system-ffi --without-pydebug 
--enable-ipv6 --with-system-libmpdec --with-pymalloc --prefix=/usr/local 
${_LATE_CONFIGURE_ARGS}
--End CONFIGURE_ARGS--

--CONFIGURE_ENV--
OPT="" PKG_CONFIG=pkgconf PYTHON="/usr/local/bin/python3.9" 
XDG_DATA_HOME=/wrkdirs/usr/ports/lang/python39/work  
XDG_CONFIG_HOME=/wrkdirs/usr/ports/lang/python39/work  
XDG_CACHE_HOME=/wrkdirs/usr/ports/lang/python39/work/.cache  
HOME=/wrkdirs/usr/ports/lang/python39/work TMPDIR="/tmp" 
PATH=/wrkdirs/usr/ports/lang/python39/work/.bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin
 
PKG_CONFIG_LIBDIR=/wrkdirs/usr/ports/lang/python39/work/.pkgconfig:/usr/local/libdata/pkgconfig:/usr/local/share/pkgconfig:/usr/libdata/pkgconfig
 SHELL=/bin/sh CONFIG_SHELL=/bin/sh 
CONFIG_SITE=/usr/ports/Templates/config.site lt_cv_sys_max_cmd_len=524288
--End CONFIGURE_ENV--

--MAKE_ENV--
OPENSSLBASE=/usr OPENSSLDIR=/etc/ssl OPENSSLINC=/usr/include 
OPENSSLLIB=/usr/lib XDG_DATA_HOME=/wrkdirs/usr/ports/lang/python39/work  
XDG_CONFIG_HOME=/wrkdirs/usr/ports/lang/python39/work  
XDG_CACHE_HOME=/wrkdirs/usr/ports/lang/python39/work/.cache  
HOME=/wrkdirs/usr/ports/lang/python39/work TMPDIR="/tmp" 
PATH=/wrkdirs/usr/ports/lang/python39/work/.bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin
 
PKG_CONFIG_LIBDIR=/wrkdirs/usr/ports/lang/python39/work/.pkgconfig:/usr/local/libdata/pkgconfig:/usr/local/share/pkgconfig:/usr/libdata/pkgconfig
 MK_DEBUG_FILES=no MK_KERNEL_SYMBOLS=no SHELL=/bin/sh NO_LINT=YES 
PREFIX=/usr/local  LOCALBASE=/usr/local  CC="cc" CFLAGS="-O2 -pipe  
-fstack-protector-strong -fno-strict-aliasing "  CPP="cpp" 
CPPFLAGS="-I/usr/local/include -I/usr/local/include"  LDFLAGS=" 
-L/usr/local/lib  -fstack-protector-strong " LIBS="-L/usr/local/lib -lintl"  
CXX="c++" CXXFLAGS="-O2 -pipe -fstack-protector-strong -fno-strict-aliasing  "  
MANP
REFIX="/usr/local" BSD_INSTALL_PROGRAM="install  -s -m 555"  
BSD_INSTALL_LIB="install  -s -m 0644"  BSD_INSTALL_SCRIPT="install  -m 555"  
BSD_INSTALL_DATA="install  -m 0644"  BSD_INSTALL_MAN="install  -m 444"
--End MAKE_ENV--

--PLIST_SUB--
ABI=  XY=39  XYDOT=3.9  XYZDOT=3.9.18  OSMAJOR=15 DEBUG="@comment " NO_DEBUG="" 
FNV="@comment " NO_FNV="" IPV6="" NO_IPV6="@comment " LIBMPDEC="" 
NO_LIBMPDEC="@comment " LTO="@comment " NO_LTO="" NLS="" NO_NLS="@comment " 
PYMALLOC="" NO_PYMALLOC="@comment " SIPHASH="@comment " NO_SIPHASH="