Bug 56389

Summary: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. при запуске ipa-healthcheck
Product: Branch p11 Reporter: Vladislav Glinkin <glinkinvd>
Component: dogtag-pkiAssignee: Stanislav Levin <slev>
Status: CLOSED FIXED QA Contact: qa-p11 <qa-p11>
Severity: normal    
Priority: P5    
Version: unspecified   
Hardware: x86_64   
OS: Linux   

Description Vladislav Glinkin 2025-10-14 14:01:33 MSK
Версии пакетов:
python3-module-freeipa-4.12.4-alt1
python3-module-dogtag-pki-11.4.3-alt6

Предусловия:
Развернут FreeIPA домен

Шаги воспроизведения:
# ipa-healthcheck --failures-only

Фактический результат:
Многочисленные предупреждения CryptographyDeprecationWarning
...
/usr/lib64/python3/site-packages/ipalib/x509.py:274: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc)
/usr/lib64/python3/site-packages/ipalib/x509.py:274: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
...

Ожидаемый результат:
Отсутствие данных предупреждений

Дополнительно:
В Sisyphus на версиях python3-module-freeipa-4.12.5-alt2 и python3-module-dogtag-pki-11.6.1-alt1.x86_64 данные предупреждения отсутствуют.
Comment 1 Stanislav Levin 2025-11-07 17:27:09 MSK
https://packages.altlinux.org/en/tasks/397124/