[Bug 278272] Latest security/py-cryptography breaks crypto.X509.get_signature_algorithm() in py-openssl

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278272

            Bug ID: 278272
           Summary: Latest security/py-cryptography breaks
                    crypto.X509.get_signature_algorithm() in py-openssl
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: sunpoet@FreeBSD.org
          Reporter: vladimir-csp@yandex.ru
          Assignee: sunpoet@FreeBSD.org
             Flags: maintainer-feedback?(sunpoet@FreeBSD.org)

Hi.
Version 42.0.5 breaks crypto.X509.get_signature_algorithm().
Version 41.0.7 works fine.

FreeBSD 13.2, python 3.11

Script to reproduce:

#!/usr/bin/env python
from OpenSSL import crypto
with open('any.rsa.cert.pem', 'r') as f:
  pem_entity = f.read()
cert = crypto.load_certificate(crypto.FILETYPE_PEM, pem_entity)
cert.get_signature_algorithm()

Result:

Traceback (most recent call last):
  File "/tmp/cert-test.py", line 8, in <module>
    cert.get_signature_algorithm()
  File "/usr/local/lib/python3.11/site-packages/OpenSSL/crypto.py", line 1299,
in get_signature_algorithm
    nid = _lib.OBJ_obj2nid(algor.algorithm)
                           ^^^^^^^^^^^^^^^
AttributeError: cdata 'X509_ALGOR *' points to an opaque type: cannot read
fields

-- 
You are receiving this mail because:
You are the assignee for the bug.