[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Problem with Openstack keystone caracal and the dependency for python3-openssl



On 10/8/24 21:36, Andre Lohmann wrote:
Hi there,

I tried to migrate my ubuntu based open stack to the latest debian and was confronted with an outdated dependecy.

I'm running the latest bookworm, with the latest bookwork-backports repositories enabled, as well as the the latest osbpo.debian.net <http://osbpo.debian.net> bookworm-caracal-backports.

After Installing keystone from these repositories and trying to run the database initialization step "keystone-manage db_sync", I was running into a python error, regarding to an outdated python3-openssl package.

AttributeError: module 'lib' has no attribute 'X509_V_FLAG_NOTIFY_POLICY'. Did you mean: 'X509_V_FLAG_EXPLICIT
_POLICY'?

As I was able to figure out, this error results from a change between python3-openssl version 23.0.0.2, that is packaged with the official debian repo (and is not provided in a more recent version neither in the debian backports repo, nor in the openstack caracal backports repo) and Version 23.2.0.

So how are you running OpenStack Caracal from the official osbpo repositories with installing a more recent version of python3-openssl?


--
--
Andre Lohmann

Hi Andre,

We run Caracal in both production, and testing env, with the "normal" python3-openssl 23.0.0-1 package, with no issue so far. I haven't see the problem you're describing above. There's no version 23.0.0.2 in Debian, only 23.0.0-1 in Bookworm, and 24.2.1-1 currently in testing.

Cheers,

Thomas Goirand (zigo)


Reply to: