Re: pkg/58079: py311-certbot-2.8.0 failure in evbarm

[Ramiro Aceves <ea1abz%gmail.com@localhost>]

The following reply was made to PR pkg/58079; it has been noted by GNATS.

From: Ramiro Aceves <ea1abz%gmail.com@localhost>
To: gnats-bugs%netbsd.org@localhost, pkg-manager%netbsd.org@localhost, gnats-admin%netbsd.org@localhost,
 pkgsrc-bugs%netbsd.org@localhost
Cc: 
Subject: Re: pkg/58079: py311-certbot-2.8.0 failure in evbarm
Date: Wed, 27 Mar 2024 14:06:51 +0100

 El 26 de marzo de 2024 12:25:00 CET, ea1abz@gmail=2Ecom escribi=C3=B3:
 >>Number:         58079
 >>Category:       pkg
 >>Synopsis:       py311-certbot-2=2E8=2E0 failure in evbarm
 >>Confidential:   no
 >>Severity:       serious
 >>Priority:       medium
 >>Responsible:    pkg-manager
 >>State:          open
 >>Class:          sw-bug
 >>Submitter-Id:   net
 >>Arrival-Date:   Tue Mar 26 11:25:00 +0000 2024
 >>Originator:     Ramiro Aceves
 >>Release:        NetBSD 10=2E0_RC6
 >>Organization:
 >>Environment:
 >netbsd-raspa$ uname -a
 >NetBSD netbsd-raspa 10=2E0_RC6 NetBSD 10=2E0_RC6 (RPI) #0: Tue Mar 12 10:=
 19:02 UTC 2024  mkrepro@mkrepro=2ENetBSD=2Eorg:/usr/src/sys/arch/evbarm/com=
 pile/RPI evbarm
 >
 >>Description:
 >Hi,
 >I was trying to use py311-certbot-2=2E8=2E0  Client for the Let's Encrypt=
  CA in my Raspberry Pi Zero W=2E I get the following error for py311-certbo=
 t-2=2E8=2E0, py312-certbot-2=2E8=2E0 and also py38-certbot-2=2E8=2E0
 >
 >netbsd-raspa$ certbot-3=2E11 certonly
 >Traceback (most recent call last):
 >  File "/usr/pkg/bin/certbot-3=2E11", line 5, in <module>
 >    from certbot=2Emain import main
 >  File "/usr/pkg/lib/python3=2E11/site-packages/certbot/main=2Epy", line =
 6, in <module>
 >    from certbot=2E_internal import main as internal_main
 >  File "/usr/pkg/lib/python3=2E11/site-packages/certbot/_internal/main=2E=
 py", line 21, in <module>
 >    import josepy as jose
 >  File "/usr/pkg/lib/python3=2E11/site-packages/josepy/__init__=2Epy", li=
 ne 40, in <module>
 >    from josepy=2Ejson_util import (
 >  File "/usr/pkg/lib/python3=2E11/site-packages/josepy/json_util=2Epy", l=
 ine 24, in <module>
 >    from OpenSSL import crypto
 >  File "/usr/pkg/lib/python3=2E11/site-packages/OpenSSL/__init__=2Epy", l=
 ine 8, in <module>
 >    from OpenSSL import crypto, SSL
 >  File "/usr/pkg/lib/python3=2E11/site-packages/OpenSSL/crypto=2Epy", lin=
 e 17, in <module>
 >    from OpenSSL=2E_util import (
 >  File "/usr/pkg/lib/python3=2E11/site-packages/OpenSSL/_util=2Epy", line=
  6, in <module>
 >    from cryptography=2Ehazmat=2Ebindings=2Eopenssl=2Ebinding import Bind=
 ing
 >  File "/usr/pkg/lib/python3=2E11/site-packages/cryptography/hazmat/bindi=
 ngs/openssl/binding=2Epy", line 14, in <module>
 >    from cryptography=2Ehazmat=2Ebindings=2E_openssl import ffi, lib
 >ImportError: /usr/pkg/lib/python3=2E11/site-packages/cryptography/hazmat/=
 bindings/_openssl=2Eabi3=2Eso: Undefined PLT symbol "FIPS_mode_set" (symnum=
  =3D 251)
 >netbsd-raspa$
 >
 >certbot seems to work in my amd64 machine=2E
 >Thanks=2E
 >
 >
 >
 >
 >>How-To-Repeat:
 >certbot-3=2E11 certonly
 >>Fix:
 >
 
 Googling around I found that FIPS_mode_set function was removed in OpenSSL=
  v3 and could be solved compiling it with legacy option=2E