[Pkg-salt-team] Bug#1067062: OpenSSL.crypto.PKCS12 is removed in pyOpenSSL 24.1.0

[Andrey Rakhmatullin]

Package: salt-common
Version: 3004.1+dfsg-2.2
Severity: serious
Tags: upstream

salt/modules/tls.py uses OpenSSL.crypto.PKCS12 which was deprecated since
pyOpenSSL 23.3.0 and is removed in 24.1.0 which will soon be uploaded to
Debian. The issue is not fixed (or reported) upstream as far as I can see. The
pyOpenSSL changelog suggests "OpenSSL.crypto.PKCS12 may be replaced by the
PKCS#12 APIs in the cryptography package."


-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (500, 'testing'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.7.9-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages salt-common depends on:
ii  iproute2               6.8.0-1
ii  python3                3.11.8-1
ii  python3-apt            2.7.6+b1
ii  python3-dateutil       2.8.2-3
ii  python3-distro         1.9.0-1
ii  python3-jinja2         3.1.3-1
ii  python3-markupsafe     2.1.5-1
ii  python3-msgpack        1.0.3-3+b1
ii  python3-pkg-resources  68.1.2-2
ii  python3-psutil         5.9.8-2
ii  python3-pycryptodome   3.20.0+dfsg-1
ii  python3-requests       2.31.0+dfsg-1
ii  python3-yaml           6.0.1-2
pn  python3-zmq            <none>

Versions of packages salt-common recommends:
ii  lsb-release       12.0-2
pn  python3-croniter  <none>

Versions of packages salt-common suggests:
ii  python3-mako  1.3.2-1
pn  salt-doc      <none>