[Pkg-freeipa-devel] Bug#1029375: freeipa-client: backtrace for "ipa cert-show 1" in testing

[Jochen Kellner]

Package: freeipa-client
Version: 4.9.8-1+b3
Severity: normal

Dear Maintainer,

   * What led up to the situation?

I've just upgraded an ipa client to bookworm/testing. When running
"ipa cert-show 1" I get a python backtrace:

[23:57:06]:echidna:(pts/3):~$ ipa cert-show 1
Traceback (most recent call last):
  File "/usr/bin/ipa", line 27, in <module>
    from ipaclient.__main__ import main
  File "/usr/lib/python3/dist-packages/ipaclient/__main__.py", line 7, in <module>
    from ipalib import api, cli
  File "/usr/lib/python3/dist-packages/ipalib/__init__.py", line 921, in <module>
    from ipalib.frontend import Command, LocalOrRemote, Updater
  File "/usr/lib/python3/dist-packages/ipalib/frontend.py", line 31, in <module>
    from ipalib.parameters import create_param, Param, Str, Flag
  File "/usr/lib/python3/dist-packages/ipalib/parameters.py", line 125, in <module>
    from ipalib.x509 import (
  File "/usr/lib/python3/dist-packages/ipalib/x509.py", line 91, in <module>
    @crypto_utils.register_interface(crypto_x509.Certificate)
AttributeError: module 'cryptography.utils' has no attribute 'register_interface'. Did you mean: 'verify_interface'?

Using the package from unstable works as expected when reading this:
https://pagure.io/freeipa/issue/9160

It would be useful to get the fixed freeipa-client&Co into bookworm.
I've unfortunatly not tried other ipa subcommands to assess the complete
impact.

-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing'), (99, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-1-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages freeipa-client depends on:
ii  bind9-dnsutils [dnsutils]    1:9.18.10-2
ii  bind9-utils                  1:9.18.10-2
ii  certmonger                   0.79.16-1+b1
ii  curl                         7.87.0-2
ii  dnsutils                     1:9.18.10-2
ii  freeipa-common               4.9.11-1
ii  krb5-user                    1.20.1-1
ii  libc6                        2.36-8
ii  libcom-err2                  1.46.6~rc1-1.1
ii  libcurl4                     7.87.0-2
ii  libini-config5               0.6.2-1
ii  libjansson4                  2.14-2
ii  libk5crypto3                 1.20.1-1
ii  libkrb5-3                    1.20.1-1
ii  libldap-2.5-0                2.5.13+dfsg-3
ii  libnss-sss                   2.8.1-1
ii  libnss3-tools                2:3.85-1
ii  libpam-sss                   2.8.1-1
ii  libpopt0                     1.19+dfsg-1
ii  libsasl2-modules-gssapi-mit  2.1.28+dfsg-10
ii  libssl3                      3.0.7-1
ii  libsss-sudo                  2.8.1-1
ii  oddjob-mkhomedir             0.34.7-1+b1
ii  python3                      3.10.6-3+b1
ii  python3-dnspython            2.2.1-2
ii  python3-gssapi               1.8.2-1
ii  python3-ipaclient            4.9.11-1
ii  python3-ldap                 3.4.3-2+b1
ii  python3-sss                  2.8.1-1
ii  sssd                         2.8.1-1

Versions of packages freeipa-client recommends:
ii  chrony  4.3-1+b1

Versions of packages freeipa-client suggests:
pn  libpam-krb5  <none>

-- no debconf information