python-cryptography: Fail to build against OpenSSL 3.0

[Simon Chopin]

Hello,

As part of a rebuild against OpenSSL3, this package failed to build on one or
several architectures. You can find the details of the rebuild at

https://people.canonical.com/~schopin/rebuilds/openssl-3.0.0-impish.html

or for the amd64 failed build, directly at

https://launchpad.net/~schopin/+archive/ubuntu/openssl-3.0.0/+build/22099303/+files/buildlog_ubuntu-impish-amd64.python-cryptography_3.3.2-1.0~ssl3ppa1.1_BUILDING.txt.gz

We're planning to transition to OpenSSL 3.0 for the 22.04 release, and consider
this issue as blocking for this transition.

You can find general migration informations at
https://www.openssl.org/docs/manmaster/man7/migration_guide.html
For your tests, you can build against libssl-dev as found in the PPA
schopin/openssl-3.0.0

The upstream version 35.0.0 should bring in OpenSSL 3.0 support.
https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst#3500---2021-09-29

[Simon Chopin (schopin)]

https://salsa.debian.org/python-team/packages/python-cryptography/-/merge_requests/6/

[Sergio Durigan Junior (sergiodj)]

Note that we don't carry a delta for python-cryptography, so once Simon's changes are accepted and uploaded by Debian, we should see them sync'ed to Ubuntu automatically.

[Launchpad Janitor (janitor)]

This bug was fixed in the package python-cryptography - 3.4.8-1

---------------
python-cryptography (3.4.8-1) unstable; urgency=medium

  [ Simon Chopin ]
  * New upstream release.
    - Closes: #995431
  * d/p/no_rust.patch, d/control: Disable the Rust part of the build
    since it's not yet mandatory
  * d/control, d/tests/control: new build-dependency on python-pytest-subtests
    for the testsuite
  * d/p/openssl3/*: Cherry-pick a patchset for OpenSSL3 compatibility.
    - LP: #1946189

  [ Tristan Seligmann ]
  * Update standards version to 4.6.0, no changes needed.
  * Fix Python dir glob for 3.10.

 -- Tristan Seligmann <email address hidden> Wed, 01 Dec 2021 17:54:50 +0200