Bug 56389 - CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. при запуске ipa-healthcheck
Summary: CryptographyDeprecationWarning: Properties that return a naïve datetime objec...
Status: CLOSED FIXED
Alias: None
Product: Branch p11
Classification: Unclassified
Component: dogtag-pki (show other bugs)
Version: unspecified
Hardware: x86_64 Linux
: P5 normal
Assignee: Stanislav Levin
QA Contact: qa-p11@altlinux.org
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-10-14 14:01 MSK by Vladislav Glinkin
Modified: 2025-11-07 17:27 MSK (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vladislav Glinkin 2025-10-14 14:01:33 MSK 
Версии пакетов:
python3-module-freeipa-4.12.4-alt1
python3-module-dogtag-pki-11.4.3-alt6

Предусловия:
Развернут FreeIPA домен

Шаги воспроизведения:
# ipa-healthcheck --failures-only

Фактический результат:
Многочисленные предупреждения CryptographyDeprecationWarning
...
/usr/lib64/python3/site-packages/ipalib/x509.py:274: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc)
/usr/lib64/python3/site-packages/ipalib/x509.py:274: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
/usr/lib64/python3/site-packages/pki/nssdb.py:2001: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc.
  cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before)
/usr/lib64/python3/site-packages/pki/nssdb.py:2002: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc.
  cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
...

Ожидаемый результат:
Отсутствие данных предупреждений

Дополнительно:
В Sisyphus на версиях python3-module-freeipa-4.12.5-alt2 и python3-module-dogtag-pki-11.6.1-alt1.x86_64 данные предупреждения отсутствуют.
Comment 1 Stanislav Levin 2025-11-07 17:27:09 MSK 
https://packages.altlinux.org/en/tasks/397124/