Azure / Azure/azure-cli-extensions
Move confcom away from openssl-1.1
- Dominant language
- Python
- Stars
- 454
- Forks
- 1.7k
- Avg merge
- 2d 19h
- Merged PRs (30d)
- 64
Description
### Describe the bug
Currently, the confcom extension depends on openssl 1.1 (at least for katapolicygen). Since openssl 1.1 is EOL, is it possible to move away to a newer openssl version?
### Related command
`az confcom katapolicygen --print-version`
### Errors
No command errors (except if openssl 1.1 isn't installed) but there isn't a question template so I used this one :)
### Issue script & Debug output
DEBUG: cli.knack.cli: Command arguments: ['confcom', 'katapolicygen', '--print-version', '--debug']
DEBUG: cli.knack.cli: __init__ debug log:
Cannot enable color.
DEBUG: cli.knack.cli: Event: Cli.PreExecute []
DEBUG: cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [, , ]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
DEBUG: cli.azure.cli.core: Command index version or cloud profile is invalid or doesn't match the current command.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core: Command index has been invalidated.
DEBUG: cli.azure.cli.core: No module found from index for '['confcom', 'katapolicygen', '--print-version', '--debug']'
DEBUG: cli.azure.cli.core: Loading all modules and extensions
DEBUG: cli.azure.cli.core: Discovered command modules: ['acr', 'acs', 'advisor', 'ams', 'apim', 'appconfig', 'appservice', 'aro', 'backup', 'batch', 'batchai', 'billing', 'botservice', 'cdn', 'cloud', 'cognitiveservices', 'compute_recommender', 'computefleet', 'config', 'configure', 'consumption', 'container', 'containerapp', 'cosmosdb', 'databoxedge', 'dls', 'dms', 'eventgrid', 'eventhubs', 'extension', 'feedback', 'find', 'hdinsight', 'identity', 'interactive', 'iot', 'keyvault', 'lab', 'managedservices', 'maps', 'marketplaceordering', 'monitor', 'mysql', 'netappfiles', 'network', 'policyinsights', 'privatedns', 'profile', 'rdbms', 'redis', 'relay', 'resource', 'role', 'search', 'security', 'servicebus', 'serviceconnector', 'servicefabric', 'signalr', 'sql', 'sqlvm', 'storage', 'synapse', 'util', 'vm']
DEBUG: cli.azure.cli.core: Loading command modules:
DEBUG: cli.azure.cli.core: Name Load Time Groups Commands
DEBUG: cli.azure.cli.core: acr 0.103 36 149
DEBUG: cli.azure.cli.core: acs 0.015 15 79
DEBUG: cli.azure.cli.core: advisor 0.001 3 6
DEBUG: cli.azure.cli.core: ams 0.003 22 100
DEBUG: cli.azure.cli.core: apim 0.002 14 69
DEBUG: cli.azure.cli.core: appconfig 0.001 9 47
DEBUG: cli.azure.cli.core: appservice 0.012 80 277
DEBUG: cli.azure.cli.core: aro 0.004 1 10
DEBUG: cli.azure.cli.core: backup 0.002 16 60
DEBUG: cli.azure.cli.core: batch 0.030 32 96
DEBUG: cli.azure.cli.core: batchai 0.001 10 30
DEBUG: cli.azure.cli.core: billing 0.007 19 53
DEBUG: cli.azure.cli.core: botservice 0.001 12 42
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:132: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
if self.AZ_PREVIEW_INFO:
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:133: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
self.preview_info = self.AZ_PREVIEW_INFO(cli_ctx=self.cli_ctx)
DEBUG: cli.azure.cli.core: cdn 0.093 8 50
DEBUG: cli.azure.cli.core: cloud 0.001 1 7
DEBUG: cli.azure.cli.core: cognitiveservices 0.001 10 33
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:50: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
if self.AZ_PREVIEW_INFO:
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:51: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
self.group_kwargs['preview_info'] = self.AZ_PREVIEW_INFO(cli_ctx=self.cli_ctx)
DEBUG: cli.azure.cli.core: compute_recommender 0.001 1 1
DEBUG: cli.azure.cli.core: computefleet 0.004 1 1
DEBUG: cli.azure.cli.core: config 0.003 2 7
DEBUG: cli.azure.cli.core: configure 0.000 2 5
DEBUG: cli.azure.cli.core: consumption 0.007 8 9
DEBUG: cli.azure.cli.core: container 0.005 2 17
DEBUG: cli.azure.cli.core: containerapp 0.056 37 123
DEBUG: cli.azure.cli.core: cosmosdb 0.007 58 200
DEBUG: cli.azure.cli.core: databoxedge 0.003 5 28
DEBUG: cli.azure.cli.core: dls 0.001 6 36
DEBUG: cli.azure.cli.core: dms 0.001 3 22
DEBUG: cli.azure.cli.core: eventgrid 0.003 25 96
DEBUG: cli.azure.cli.core: eventhubs 0.006 14 21
DEBUG: cli.azure.cli.core: extension 0.000 1 7
DEBUG: cli.azure.cli.core: feedback 0.000 1 2
DEBUG: cli.azure.cli.core: find 0.000 1 1
DEBUG: cli.azure.cli.core: hdinsight 0.003 9 42
DEBUG: cli.azure.cli.core: identity 0.003 2 7
DEBUG: cli.azure.cli.core: interactive 0.000 1 1
DEBUG: cli.azure.cli.core: iot 0.049 19 82
DEBUG: cli.azure.cli.core: keyvault 0.004 20 114
DEBUG: cli.azure.cli.core: lab 0.014 9 30
DEBUG: cli.azure.cli.core: managedservices 0.004 3 8
DEBUG: cli.azure.cli.core: maps 0.001 5 13
DEBUG: cli.azure.cli.core: marketplaceordering 0.001 1 2
DEBUG: cli.azure.cli.core: monitor 0.303 18 64
DEBUG: cli.azure.cli.core: mysql 0.043 16 56
DEBUG: cli.azure.cli.core: netappfiles 0.020 8 15
DEBUG: cli.azure.cli.core: network 0.072 106 351
DEBUG: cli.azure.cli.core: policyinsights 0.005 9 17
DEBUG: cli.azure.cli.core: privatedns 0.008 14 60
DEBUG: cli.azure.cli.core: profile 0.001 2 8
DEBUG: cli.azure.cli.core: rdbms 0.046 52 217
DEBUG: cli.azure.cli.core: redis 0.001 7 38
DEBUG: cli.azure.cli.core: relay 0.010 7 8
DEBUG: cli.azure.cli.core: resource 0.008 52 232
DEBUG: cli.azure.cli.core: role 0.002 17 62
DEBUG: cli.azure.cli.core: search 0.003 7 19
DEBUG: cli.azure.cli.core: security 0.005 48 98
DEBUG: cli.azure.cli.core: servicebus 0.004 13 17
DEBUG: cli.azure.cli.core: serviceconnector 0.022 20 331
DEBUG: cli.azure.cli.core: servicefabric 0.007 27 80
DEBUG: cli.azure.cli.core: signalr 0.001 10 42
DEBUG: cli.azure.cli.core: sql 0.007 56 215
DEBUG: cli.azure.cli.core: sqlvm 0.016 4 20
DEBUG: cli.azure.cli.core: storage 0.029 60 275
DEBUG: cli.azure.cli.core: synapse 0.006 54 246
DEBUG: cli.azure.cli.core: util 0.001 3 7
DEBUG: cli.azure.cli.core: vm 0.050 59 213
DEBUG: cli.azure.cli.core: Total (65) 1.126 1193 4674
DEBUG: cli.azure.cli.core: Loading extensions:
DEBUG: cli.azure.cli.core: Name Load Time Groups Commands Directory
DEBUG: cli.azure.cli.core: confcom 0.003 1 3 /nix/store/5c9v8hpdharbd2f3x2m6b0as88cps5ja-azure-cli-extensions/confcom
DEBUG: cli.azure.cli.core: Total (1) 0.003 1 3
DEBUG: cli.azure.cli.core: Loaded 1180 groups, 4677 commands.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core: Updated command index in 0.002 seconds.
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate []
DEBUG: cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/motte/.azure/commands/2025-07-23.15-13-13.confcom_katapolicygen.121246.log'.
INFO: az_command_data_logger: command args: confcom katapolicygen --print-version --debug
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [.add_subscription_parameter at 0x7ff8152b49a0>]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [.add_ids_arguments at 0x7ff8152b6ca0>, .add_cache_arguments at 0x7ff8152b6de0>, .update_breaking_change_info at 0x7ff8152b6e80>]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [, , .parse_ids_arguments at 0x7ff8152b6d40>]
INFO: az_command_data_logger: extension name: confcom
INFO: az_command_data_logger: extension version: 1.2.6
Kata Containers policy tool (Rust): id: genpolicy, version: 3.2.0-azl3.genpolicy3, commit: 89277ccba9e11234c350cb27b8745b1160199440
DEBUG: cli.knack.cli: Event: CommandInvoker.OnTransformResult [, ]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnFilterResult []
DEBUG: cli.knack.cli: Event: Cli.SuccessfulExecute []
DEBUG: cli.knack.cli: Event: Cli.PostExecute []
INFO: az_command_data_logger: exit code: 0
INFO: cli.__main__: Command ran in 1.496 seconds (init: 0.237, invoke: 1.259)
INFO: telemetry.main: Begin splitting cli events and extra events, total events: 1
INFO: telemetry.client: Accumulated 0 events. Flush the clients.
INFO: telemetry.main: Finish splitting cli events and extra events, cli events: 1
INFO: telemetry.save: Save telemetry record of length 3897 in cache file under /home/motte/.azure/telemetry/20250723151313566
INFO: telemetry.main: Begin creating telemetry upload process.
INFO: telemetry.process: Creating upload process: "/nix/store/djck7mx6jad1w0yy6zings96dyxanls6-python3-3.13.5/bin/python3.13 /nix/store/wf55523dxyybczx6nqs6m69xyylnqcbf-python3.13-azure-cli-telemetry-1.1.0/lib/python3.13/site-packages/azure/cli/telemetry/__init__.py /home/motte/.azure /home/motte/.azure/telemetry/20250723151313566"
INFO: telemetry.process: Return from creating process 121307
INFO: telemetry.main: Finish creating telemetry upload process.
### Expected behavior
`confcom` doesn't depend on openssl 1.1 so people don't have to install an outdated version of openssl.
### Environment Summary
azure-cli 2.75.0
core 2.75.0
telemetry 1.1.0
Extensions:
confcom 1.2.6
Dependencies:
msal 1.32.3
azure-mgmt-resource 23.4.0
Python location '/nix/store/djck7mx6jad1w0yy6zings96dyxanls6-python3-3.13.5/bin/python3.13'
Config directory '/home/motte/.azure'
Extensions directory '/nix/store/5c9v8hpdharbd2f3x2m6b0as88cps5ja-azure-cli-extensions'
Python (Linux) 3.13.5 (main, Jun 11 2025, 15:36:57) [GCC 14.3.0]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
### Additional context
I am maintaining the confcom extension for [nixpkgs](https://github.com/nixos/nixpkgs). Per issue https://github.com/NixOS/nixpkgs/issues/269713, all packages that depend on the `openssl-1-1` package should be removed soon.
Contributor guide
Research direction
Start by reproducing the issue with `az confcom katapolicygen --print-version` and inspect the confcom extension's dependency and build configuration. Trace where katapolicygen uses OpenSSL and check the extension's existing tests or packaging checks. Done means the extension no longer requires the EOL OpenSSL 1.1 and the related command works without that dependency.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- cli
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100