Azure / Azure/azure-cli

Move to cryptography and drop pyOpenSSL dependency

Open
#29,455 1 comment 0 reactions 2 assignees Claimed by @evelyn-ys View on GitHub
act-platform-engineering-squad Azure CLI Team Core feature-request
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

Per https://pypi.org/project/pyOpenSSL/

> Note: The Python Cryptographic Authority **strongly suggests** the use of [pyca/cryptography](https://github.com/pyca/cryptography) where possible. If you are using pyOpenSSL for anything other than making a TLS connection **you should move to cryptography and drop your pyOpenSSL dependency**.

`pyOpenSSL` is still widely used in Azure CLI's command modules, such as `role` and `keyvault`:

https://github.com/Azure/azure-cli/blob/38eaebb6936a32be13e2c4afba8e600ce9c91513/src/azure-cli/azure/cli/command_modules/role/custom.py#L1376

https://github.com/Azure/azure-cli/blob/a7a886923fee1ec761262b583c6640cca8a3dc5c/src/azure-cli/azure/cli/command_modules/keyvault/_validators.py#L714

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.