[Bug 2144373] Re: latest update to python3-cryptography breaks ecc secp384r1 support

[Marc Deslauriers]

I can confirm, this seems to have regressed. Simple reproducer:

import cryptography.hazmat.primitives.asymmetric.ec
print(cryptography.hazmat.primitives.asymmetric.ec.__dict__)

** Also affects: python-cryptography (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: python-cryptography (Ubuntu Questing)
   Importance: Undecided
       Status: New

** Changed in: python-cryptography (Ubuntu Noble)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: python-cryptography (Ubuntu Questing)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: python-cryptography (Ubuntu Noble)
       Status: New => Confirmed

** Changed in: python-cryptography (Ubuntu Questing)
       Status: New => Confirmed

** Changed in: python-cryptography (Ubuntu Noble)
   Importance: Undecided => High

** Changed in: python-cryptography (Ubuntu Questing)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to python-cryptography in Ubuntu.
https://bugs.launchpad.net/bugs/2144373

Title:
  latest update to python3-cryptography breaks ecc secp384r1 support

Status in python-cryptography package in Ubuntu:
  New
Status in python-cryptography source package in Noble:
  Confirmed
Status in python-cryptography source package in Questing:
  Confirmed

Bug description:
  When running the latest version of python3-cryptography on Ubuntu
  24.04 (41.0.7-4ubuntu0.3), ansible playbooks are failing when the ECC
  curve is set to secp384r1 for the private key. Ansible output shows:

  fatal: [localhost]: FAILED! => changed=false
  msg: Your cryptography version does not support SECP384R1

  There appears to be a regression in supporting ECC secp384r1 keys.

  When reverting to python3-cryptography version 41.0.7-4build3, ansible
  playbook works as expected.

  In addition, launchpad stated "python3-cryptography" does not exist in
  ubuntu when filing this bug, but that is the package that has
  regressed:

  root at dogfood-source-arm64-ans-02-25-2026:/usr/share/ansible# apt list
  --installed | grep cryptography

  WARNING: apt does not have a stable CLI interface. Use with caution in
  scripts.

  python3-cryptography/noble,now 41.0.7-4build3 arm64
  [installed,upgradable to: 41.0.7-4ubuntu0.3]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-cryptography/+bug/2144373/+subscriptions