Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1927154
| Summary: | Running ipa-server-install fails with cryptography.utils.InterfaceNotImplemented: <class 'ipalib.x509.IPACertificate'>.__eq__'s signature differs from the expected. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Jan Pazdziora <jpazdziora> |
| Component: | python-cryptography | Assignee: | Jeremy Cline <jeremy> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | abokovoy, cheimes, fdc, ftrivino, ipa-maint, itamar, jcholast, jeremy, jhrozek, jpazdziora, mhjacks, nick, npmccallum, pvoborni, rcritten, ssorce, terrycwk1994, twoerner, wdh |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | python-cryptography-3.4.2-1 python-cryptography-3.4.6-1.fc34 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-03-19 17:44:47 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1927044 | ||
| Bug Blocks: | |||
What version of python-cryptography do you have? The issue should be fixed in 3.4.2. The repo at https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/Packages/p/ carries python3-cryptography-3.4.1-1.fc34.x86_64.rpm even if https://bodhi.fedoraproject.org/updates/FEDORA-2021-0aa7abd5ef says it was pushed to stable two days ago. But so does https://bodhi.fedoraproject.org/updates/FEDORA-2021-ae11bd2c46 -- is it possible that the older build was pushed after the newer one and that's why 3.4.2 is not in the repo? By the way, both builds report fedora-ci.koji-build.rpminspect.static-analysis test failures. I don't think there was a successful Rawhide compose since that push. As for rpminspect failures, I see them all the time. For example, https://osci-jenkins-1.ci.fedoraproject.org/job/fedora-ci/job/rpminspect-pipeline/job/master/10190/testReport/(root)/tests/_filesize/ fails due to OCI error: Error: exec session exited with non-zero exit code 1: OCI runtime error I'm working on python-cryptography-3.4.4 for F35 and F34 now. Upstream released two more bug fix releases since Monday. FEDORA-2021-e6aad2194c has been pushed to the Fedora 35 stable repository. If problem still persists, please make note of it in this bug report. (In reply to Alexander Bokovoy from comment #5) > I don't think there was a successful Rawhide compose since that push. Doesn't https://bodhi.fedoraproject.org/updates/FEDORA-2021-0aa7abd5ef's status Stable mean that the update landed on a compose? Nope, that's what I learned myself last year. When bodhi marks it 'stable' for Rawhide, it only means 'slated to be in the compose when it is done, successfully'. Composes aren't produced immediately. Latest rawhide compose was two days ago: Fedora-Rawhide-20210208.n.0 See list of composes and their testing status: https://openqa.fedoraproject.org/nightlies.html Ah, good to know. I've filed https://github.com/fedora-infra/bodhi/issues/4185 for that now. I'm changing the component to python-cryptography. The problem is fixed in python-cryptography-3.4.2-1 and 3.4.4-1. FEDORA-2021-08b9c4e2b9 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-08b9c4e2b9 FEDORA-2021-8d5f2b4424 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-8d5f2b4424 FEDORA-2021-8d5f2b4424 has been pushed to the Fedora 34 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-8d5f2b4424` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-8d5f2b4424 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2021-8d5f2b4424 has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2021-8d5f2b4424 has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report. |
Description of problem: Running ipa-server-install in Fedora rawhide started to fail with cryptography.utils.InterfaceNotImplemented: <class 'ipalib.x509.IPACertificate'>.__eq__'s signature differs from the expected. Expected: <Signature (self, other: object) -> bool>. Received: <Signature (self, other)> Version-Release number of selected component (if applicable): freeipa-server-4.9.1-1.fc34.x86_64 How reproducible: Deterministic. Steps to Reproduce: 1. dnf install -y --setopt=install_weak_deps=False freeipa-server freeipa-server-dns 2. ipa-server-install -U -r EXAMPLE.TEST -n example.test -p Secret123 -a Secret123 --setup-dns --no-forwarders --no-ntp Actual results: Traceback (most recent call last): File "/usr/sbin/ipa-server-install", line 23, in <module> from ipaserver.install import ipa_server_install File "/usr/lib/python3.9/site-packages/ipaserver/install/ipa_server_install.py", line 10, in <module> from ipaserver.install.server import ServerMasterInstall File "/usr/lib/python3.9/site-packages/ipaserver/install/server/__init__.py", line 11, in <module> from ipaclient.install import client File "/usr/lib/python3.9/site-packages/ipaclient/install/client.py", line 37, in <module> from ipalib import api, errors, x509 File "/usr/lib/python3.9/site-packages/ipalib/__init__.py", line 921, in <module> from ipalib.frontend import Command, LocalOrRemote, Updater File "/usr/lib/python3.9/site-packages/ipalib/frontend.py", line 31, in <module> from ipalib.parameters import create_param, Param, Str, Flag File "/usr/lib/python3.9/site-packages/ipalib/parameters.py", line 125, in <module> from ipalib.x509 import ( File "/usr/lib/python3.9/site-packages/ipalib/x509.py", line 92, in <module> class IPACertificate: File "/usr/lib64/python3.9/site-packages/cryptography/utils.py", line 45, in register_decorator verify_interface(iface, klass) File "/usr/lib64/python3.9/site-packages/cryptography/utils.py", line 84, in verify_interface raise InterfaceNotImplemented( cryptography.utils.InterfaceNotImplemented: <class 'ipalib.x509.IPACertificate'>.__eq__'s signature differs from the expected. Expected: <Signature (self, other: object) -> bool>. Received: <Signature (self, other)> Expected results: No error, FreeIPA server configured. Additional info: