[Bug 2004477] Re: cryptography pkg 39.0.0 incompatible with pyOpenSSL 21.0.0 - crashes ensue

[Donald H Locker]

I think this issue may have to be resolved by the maintainers of the
package that broke my machine at that time. Going through logs, it
appears that an HPLIP (HP Linux Imaging and Printing) update was the
actual culprit in this case, by installing their required version of
these packages as system-wide versions.

Thank you for the response, and my apologies for not addressing this bug
sooner. It should be Resolved as Invalid. (I'll see if I can do that
myself.)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/2004477

Title:
  cryptography pkg 39.0.0 incompatible with pyOpenSSL 21.0.0 - crashes
  ensue

Status in openssl package in Ubuntu:
  New

Bug description:
  crypto.py crashes when starting protonvpn:

  $ protonvpn-cli connect SE1
    Tue Jan 31 07:08:04 AM EST 2023
  Traceback (most recent call last):
    File "/usr/bin/protonvpn-cli", line 11, in <module>
      load_entry_point('protonvpn-cli==3.13.0', 'console_scripts', 'protonvpn-cli')()
    File "/usr/lib/python3/dist-packages/protonvpn_cli/main.py", line 20, in main
      from .cli import ProtonVPNCLI
    File "/usr/lib/python3/dist-packages/protonvpn_cli/cli.py", line 4, in <module>
      from proton.constants import VERSION as proton_version
    File "/usr/lib/python3/dist-packages/proton/__init__.py", line 1, in <module>
      from .api import Session # noqa
    File "/usr/lib/python3/dist-packages/proton/api.py", line 21, in <module>
      from .cert_pinning import TLSPinningAdapter
    File "/usr/lib/python3/dist-packages/proton/cert_pinning.py", line 5, in <module>
      from OpenSSL import crypto
    File "/usr/lib/python3/dist-packages/OpenSSL/__init__.py", line 8, in <module>
      from OpenSSL import crypto, SSL
    File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 3279, in <module>
      _lib.OpenSSL_add_all_algorithms()
  AttributeError: module 'lib' has no attribute 'OpenSSL_add_all_algorithms'
  Tue Jan 31 07:08:05 AM EST 2023

  c.f. https://askubuntu.com/questions/1450578/couldnt-launch-proton-vpn

  but downgrading openssl package is not desirable for security reasons.

  per https://github.com/pyca/cryptography/issues/7959 and other hits on search, cryptography package 39.0.0 is incompatible with pyOpenSSL 21.0.0; cryptography 38.0.4 works with 21.0.0; cryptography 39.0.0 requires 22.1.0 or greater.
  Installed packages are python3-cryptography 3.4.8-1ubuntu2 and 21.0.0-1 python3-openssl
  Currently, python3-openssl 22.1.0 is not available from repo.

  $ lsb_release -rd:
  Description:	Ubuntu 22.04.1 LTS
  Release:	22.04
  $ apt-cache policy python3-openssl
  python3-openssl:
    Installed: 21.0.0-1
    Candidate: 21.0.0-1
    Version table:
   *** 21.0.0-1 500
          500 http://archive.ubuntu.com/ubuntu jammy/main amd64 Packages
          500 http://archive.ubuntu.com/ubuntu jammy/main i386 Packages
          100 /var/lib/dpkg/status
  $

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2004477/+subscriptions