bcrypt version installed exceeds passlib support

Bug #2063140 reported by Jay Jahns
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
kolla-ansible
New
Undecided
Unassigned

Bug Description

In the requirements.txt, we have required the following for password hashing:

# Password hashing
bcrypt>=3.0.0 # Apache-2.0
passlib[bcrypt]>=1.0.0 # BSD

However, bcrypt stops support of passlib as of 4.0.1

With this requirement value, we end up with something higher than that, example 4.1.2.

pip freeze | grep bcrypt
bcrypt==4.1.2

I have not done any testing on changes to this yet, but I also found this reference.
https://github.com/pyca/bcrypt/issues/684

Revision history for this message
Jay Jahns (jayjahns) wrote :

This does impact 2023.2.

It seems we are generating an error on generating the prometheus password, since it uses password_hash('bcrypt', salt=<salt variable>)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.