Re: pkg/58079: py311-certbot-2.8.0 failure in evbarm

[Ramiro Aceves <ea1abz%gmail.com@localhost>]

El 26 de marzo de 2024 12:25:00 CET, ea1abz%gmail.com@localhost escribió:
>>Number:         58079
>>Category:       pkg
>>Synopsis:       py311-certbot-2.8.0 failure in evbarm
>>Confidential:   no
>>Severity:       serious
>>Priority:       medium
>>Responsible:    pkg-manager
>>State:          open
>>Class:          sw-bug
>>Submitter-Id:   net
>>Arrival-Date:   Tue Mar 26 11:25:00 +0000 2024
>>Originator:     Ramiro Aceves
>>Release:        NetBSD 10.0_RC6
>>Organization:
>>Environment:
>netbsd-raspa$ uname -a
>NetBSD netbsd-raspa 10.0_RC6 NetBSD 10.0_RC6 (RPI) #0: Tue Mar 12 10:19:02 UTC 2024  mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/evbarm/compile/RPI evbarm
>
>>Description:
>Hi,
>I was trying to use py311-certbot-2.8.0  Client for the Let's Encrypt CA in my Raspberry Pi Zero W. I get the following error for py311-certbot-2.8.0, py312-certbot-2.8.0 and also py38-certbot-2.8.0
>
>netbsd-raspa$ certbot-3.11 certonly
>Traceback (most recent call last):
>  File "/usr/pkg/bin/certbot-3.11", line 5, in <module>
>    from certbot.main import main
>  File "/usr/pkg/lib/python3.11/site-packages/certbot/main.py", line 6, in <module>
>    from certbot._internal import main as internal_main
>  File "/usr/pkg/lib/python3.11/site-packages/certbot/_internal/main.py", line 21, in <module>
>    import josepy as jose
>  File "/usr/pkg/lib/python3.11/site-packages/josepy/__init__.py", line 40, in <module>
>    from josepy.json_util import (
>  File "/usr/pkg/lib/python3.11/site-packages/josepy/json_util.py", line 24, in <module>
>    from OpenSSL import crypto
>  File "/usr/pkg/lib/python3.11/site-packages/OpenSSL/__init__.py", line 8, in <module>
>    from OpenSSL import crypto, SSL
>  File "/usr/pkg/lib/python3.11/site-packages/OpenSSL/crypto.py", line 17, in <module>
>    from OpenSSL._util import (
>  File "/usr/pkg/lib/python3.11/site-packages/OpenSSL/_util.py", line 6, in <module>
>    from cryptography.hazmat.bindings.openssl.binding import Binding
>  File "/usr/pkg/lib/python3.11/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 14, in <module>
>    from cryptography.hazmat.bindings._openssl import ffi, lib
>ImportError: /usr/pkg/lib/python3.11/site-packages/cryptography/hazmat/bindings/_openssl.abi3.so: Undefined PLT symbol "FIPS_mode_set" (symnum = 251)
>netbsd-raspa$
>
>certbot seems to work in my amd64 machine.
>Thanks.
>
>
>
>
>>How-To-Repeat:
>certbot-3.11 certonly
>>Fix:
>

Googling around I found that FIPS_mode_set function was removed in OpenSSL v3 and could be solved compiling it with legacy option.