[Bug 2004477] Re: cryptography pkg 39.0.0 incompatible with pyOpenSSL 21.0.0 - crashes ensue

[Donald H Locker]

My solution was as follows:
0 - observed that hplip-uninstall failed (c.f.https://bugs.launchpad.net/hplip/+bug/2008635 for details); great anxiety ensued; notes say "Total WAG experiment:" and then the following actions
1 - [Synaptic] install hplip (version 3.21.12+dfsg0-1) (also installs: hplip-data, lib{hpmud0,sane-hpaio}, printer-driver-{hpcups,postscript-hp}, python3-{notify2,renderpm,reportlab,reportlab-accel}), hplip-doc, hplip-gui (also installs: python3-dbus.mainloop.pyqt5)
-- note that after this installation, hp-info "works" (i.e. it doesn't crash immediately as in the bug report) and interacts appropriately with the printer (HP2734E)
2 - Found other files in /usr/share/hplip that the Jan 27 debacle installed, apparently by pip, so uninstalled them:
$ sudo bash
# for m in cffi charset-normalizer coloredlogs cryptography deprecation humanfriendly imageio img2pdf imutils networkx ocrmypdf opencv-python pdfminer.six pikepdf pluggy pycparser PyPDF2 PyWavelets scikit-image tesserocr tifffile tqdm pip; do pip uninstall $m; done
3 - [Synaptic] re-install python3-cryptography

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/2004477

Title:
  cryptography pkg 39.0.0 incompatible with pyOpenSSL 21.0.0 - crashes
  ensue

Status in openssl package in Ubuntu:
  Invalid

Bug description:
  crypto.py crashes when starting protonvpn:

  $ protonvpn-cli connect SE1
    Tue Jan 31 07:08:04 AM EST 2023
  Traceback (most recent call last):
    File "/usr/bin/protonvpn-cli", line 11, in <module>
      load_entry_point('protonvpn-cli==3.13.0', 'console_scripts', 'protonvpn-cli')()
    File "/usr/lib/python3/dist-packages/protonvpn_cli/main.py", line 20, in main
      from .cli import ProtonVPNCLI
    File "/usr/lib/python3/dist-packages/protonvpn_cli/cli.py", line 4, in <module>
      from proton.constants import VERSION as proton_version
    File "/usr/lib/python3/dist-packages/proton/__init__.py", line 1, in <module>
      from .api import Session # noqa
    File "/usr/lib/python3/dist-packages/proton/api.py", line 21, in <module>
      from .cert_pinning import TLSPinningAdapter
    File "/usr/lib/python3/dist-packages/proton/cert_pinning.py", line 5, in <module>
      from OpenSSL import crypto
    File "/usr/lib/python3/dist-packages/OpenSSL/__init__.py", line 8, in <module>
      from OpenSSL import crypto, SSL
    File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 3279, in <module>
      _lib.OpenSSL_add_all_algorithms()
  AttributeError: module 'lib' has no attribute 'OpenSSL_add_all_algorithms'
  Tue Jan 31 07:08:05 AM EST 2023

  c.f. https://askubuntu.com/questions/1450578/couldnt-launch-proton-vpn

  but downgrading openssl package is not desirable for security reasons.

  per https://github.com/pyca/cryptography/issues/7959 and other hits on search, cryptography package 39.0.0 is incompatible with pyOpenSSL 21.0.0; cryptography 38.0.4 works with 21.0.0; cryptography 39.0.0 requires 22.1.0 or greater.
  Installed packages are python3-cryptography 3.4.8-1ubuntu2 and 21.0.0-1 python3-openssl
  Currently, python3-openssl 22.1.0 is not available from repo.

  $ lsb_release -rd:
  Description:	Ubuntu 22.04.1 LTS
  Release:	22.04
  $ apt-cache policy python3-openssl
  python3-openssl:
    Installed: 21.0.0-1
    Candidate: 21.0.0-1
    Version table:
   *** 21.0.0-1 500
          500 http://archive.ubuntu.com/ubuntu jammy/main amd64 Packages
          500 http://archive.ubuntu.com/ubuntu jammy/main i386 Packages
          100 /var/lib/dpkg/status
  $

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2004477/+subscriptions