openwrt/package
Christian Lamparter 23c86d44bc ca-certificates: fix python3-cryptography woes in certdata2pem.py
This patch is a revert of the upstream patch to Debian's ca-certificate
commit 033d52259172 ("mozilla/certdata2pem.py: print a warning for expired certificates.")

The reason is, that this change broke builds with the popular
Ubuntu 20.04 LTS (focal) releases which are shipping with an
older version of the python3-cryptography package that is not
compatible.

|Traceback (most recent call last):
|  File "certdata2pem.py", line 125, in <module>
|    cert = x509.load_der_x509_certificate(obj['CKA_VALUE'])
|TypeError: load_der_x509_certificate() missing 1 required positional argument: 'backend'
|make[5]: *** [Makefile:6: all] Error 1

...or if the python3-cryptography was missing all together:
|Traceback (most recent call last):
|  File "/certdata2pem.py", line 31, in <module>
|    from cryptography import x509
|ModuleNotFoundError: No module named 'cryptography'

More concerns were raised by Jo-Philipp Wich:
"We don't want the build to depend on the local system time anyway.
Right now it seems to be just a warning but I could imagine that
eventually certs are simply omitted of found to be expired at
build time which would break reproducibility."

Link: <https://github.com/openwrt/openwrt/commit/7c99085bd697>
Reported-by: Chen Minqiang <ptpt52@gmail.com>
Reported-by: Shane Synan <digitalcircuit36939@gmail.com>
Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(cherry picked from commit 25bc66eb40)
2023-03-04 13:09:12 +01:00
..
base-files base-files: support "metric" in board.json 2022-12-01 16:09:27 +01:00
boot uboot-layerscape: adjust LS1012A-IOT config and env 2022-11-12 21:05:43 +01:00
devel binutils: fix libbfd missing DSO dependency if NLS enabled 2021-04-10 14:22:28 +02:00
firmware firmware: intel-microcode: update to 20220809 2022-10-09 17:43:41 +02:00
kernel mac80211: Update to version 5.10.168-1 2023-02-18 19:22:17 +01:00
libs openssl: bump to 1.1.1t 2023-02-18 16:16:44 +01:00
network kernel: kmod-ipt-ulog: Remove package 2023-01-06 17:23:25 +01:00
system ca-certificates: fix python3-cryptography woes in certdata2pem.py 2023-03-04 13:09:12 +01:00
utils treewide: fix security issues by bumping all packages using libwolfssl 2022-10-05 21:09:50 +02:00
Makefile build: fix opkg install step for large package selection 2021-12-31 17:55:29 +01:00