URL: https://github.com/freeipa/freeipa/pull/4936
Author: stanislavlevin
 Title: #4936: ipatests: Add compatibility against python-cryptography 3.0
Action: opened

PR body:
"""
The recently released python-cryptography 3.0 has backward incompatible
changes. One of them \[0\] breaks FreeIPA self-tests.

Note: this requires python-cryptography 2.7+.

[0] 
https://github.com/pyca/cryptography/commit/3b2102af549c1095d5478bb1243ee4cf76b9762b

Fixes: https://pagure.io/freeipa/issue/8428
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4936/head:pr4936
git checkout pr4936
From 5fe239310e7dee13f9960309fc4eb76adae4ff6e Mon Sep 17 00:00:00 2001
From: Stanislav Levin <s...@altlinux.org>
Date: Thu, 23 Jul 2020 15:04:49 +0300
Subject: [PATCH] ipatests: Add compatibility against python-cryptography 3.0

The recently released python-cryptography 3.0 has backward incompatible
changes. One of them [0] breaks FreeIPA self-tests.

Note: this requires python-cryptography 2.7+.

[0] https://github.com/pyca/cryptography/commit/3b2102af549c1095d5478bb1243ee4cf76b9762b

Fixes: https://pagure.io/freeipa/issue/8428
Signed-off-by: Stanislav Levin <s...@altlinux.org>
---
 ipatests/pytest_ipa/integration/create_caless_pki.py | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/ipatests/pytest_ipa/integration/create_caless_pki.py b/ipatests/pytest_ipa/integration/create_caless_pki.py
index f2a98f5a78..ae8e498171 100644
--- a/ipatests/pytest_ipa/integration/create_caless_pki.py
+++ b/ipatests/pytest_ipa/integration/create_caless_pki.py
@@ -150,11 +150,12 @@ def profile_ca(builder, ca_nick, ca):
             critical=False,
         )
     else:
-        ski = ca.cert.extensions.get_extension_for_class(
-                    x509.SubjectKeyIdentifier)
+        ski_ext = ca.cert.extensions.get_extension_for_class(
+            x509.SubjectKeyIdentifier
+        )
         builder = builder.add_extension(
             x509.AuthorityKeyIdentifier
-            .from_issuer_subject_key_identifier(ski),
+            .from_issuer_subject_key_identifier(ski_ext.value),
             critical=False,
         )
     return builder
_______________________________________________
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org

Reply via email to