-
Bug
-
Resolution: Done
-
Undefined
-
None
-
rhel-10.0
-
None
-
None
-
Low
-
rhel-idm-ipa
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
ipa-healthcheck gives this warning for RHEL 10:
CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc. return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc)
What is the impact of this issue to you?
none, unnecessary warning
Please provide the package NVR for which the bug is seen:
ipa-server-4.12.2-15.el10_0.4.x86_64
How reproducible is this bug?:
always
Steps to reproduce
- run ipa-healthcheck
- get warning
Expected results
all scripts use modern datetime implementation
Actual results
we are using old naïve datetime object in RHEL 10 with python 3.12:
[root@ipa10 ~]# grep datetime.timezone.utc /usr/lib/python3.12/site-packages/ -r /usr/lib/python3.12/site-packages/ipalib/parameters.py: time = datetime.datetime.now(tz=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipalib/rpc.py: tz=datetime.timezone.utc)) /usr/lib/python3.12/site-packages/ipalib/rpc.py: timestamp=datetime.datetime.now(tz=datetime.timezone.utc)) /usr/lib/python3.12/site-packages/ipalib/x509.py: return self._cert.not_valid_before.replace(tzinfo=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipalib/x509.py: return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipalib/x509.py: tzinfo=datetime.timezone.utc /usr/lib/python3.12/site-packages/ipalib/x509.py: tzinfo=datetime.timezone.utc /usr/lib/python3.12/site-packages/pki/nssdb.py: not_before = cert_obj.not_valid_before.replace(tzinfo=datetime.timezone.utc) /usr/lib/python3.12/site-packages/pki/nssdb.py: not_after = cert_obj.not_valid_after.replace(tzinfo=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipapython/certdb.py: utcnow = datetime.datetime.now(tz=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipapython/cookie.py: self._expires.replace(tzinfo=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipapython/cookie.py: now = datetime.datetime.now(tz=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipapython/ipautil.py: epoch = datetime.datetime(1970, 1, 1, tzinfo=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipaserver/install/certs.py: now = datetime.datetime.now(tz=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipaserver/install/certs.py: tzinfo=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipaserver/install/ipa_cacert_manage.py: now = datetime.datetime.now(tz=datetime.timezone.utc) /usr/lib/python3.12/site-packages/ipaserver/install/ipa_cert_fix.py: datetime.datetime.now(tz=datetime.timezone.utc)
- duplicates
-
-
- Closed
-
