Bug 222536

Summary:	security/py-certbot: Fails to run, dependency error. (security/py-cryptography is outdated)
Product:	Ports & Packages	Reporter:	Kamigishi Rei <spambox>
Component:	Individual Port(s)	Assignee:	Kubilay Kocak <koobs>
Status:	Closed FIXED
Severity:	Affects Many People	CC:	cpm, sbz, tablooaraz, yasu
Priority:	---	Keywords:	regression
Version:	Latest	Flags:	koobs: maintainer-feedback+ cpm: maintainer-feedback+
Hardware:	Any
OS:	Any
See Also:	https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222519
Bug Depends on:	222519, 222520
Bug Blocks:

Description Kamigishi Rei 2017-09-23 16:30:42 UTC

certbot now requires py-cryptography 1.9 or above (see also: bug #222519). The port should probably explicitly depend on py-cryptography>=1.9.

Command output:

% certbot
Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/pkg_resources/__init__.py", line 657, in _build_master
    ws.require(__requires__)
  File "/usr/local/lib/python3.6/site-packages/pkg_resources/__init__.py", line 971, in require
    needed = self.resolve(parse_requirements(requirements))
  File "/usr/local/lib/python3.6/site-packages/pkg_resources/__init__.py", line 862, in resolve
    raise VersionConflict(dist, req).with_context(dependent_req)
pkg_resources.ContextualVersionConflict: (cryptography 1.7.2 (/usr/local/lib/python3.6/site-packages), Requirement.parse('cryptography>=1.9'), {'PyOpenSSL'})

  File "/usr/local/lib/python3.6/site-packages/pkg_resources/__init__.py", line 3051, in _initialize_master_working_set
    working_set = WorkingSet._build_master()
  File "/usr/local/lib/python3.6/site-packages/pkg_resources/__init__.py", line 659, in _build_master
    return cls._build_from_requirements(__requires__)
  File "/usr/local/lib/python3.6/site-packages/pkg_resources/__init__.py", line 672, in _build_from_requirements
    dists = ws.resolve(reqs, Environment())
  File "/usr/local/lib/python3.6/site-packages/pkg_resources/__init__.py", line 862, in resolve
    raise VersionConflict(dist, req).with_context(dependent_req)
pkg_resources.ContextualVersionConflict: (cryptography 1.7.2 (/usr/local/lib/python3.6/site-packages), Requirement.parse('cryptography>=1.9'), {'PyOpenSSL'})

Comment 1 Yasuhiro Kimura freebsd_committer

2017-09-23 17:20:31 UTC

(In reply to Kamigishi Rei from comment #0)

This it not bug of security/py-certbot. It happens because of security/py-openssl update. See bug #222520.

Comment 2 Kubilay Kocak freebsd_committer

2017-09-24 02:07:16 UTC

There's an update to 0.18.2 in progress for a separately reported issue. Will take a look.

Thank you for your report Kamigishi

Comment 3 Kubilay Kocak freebsd_committer

2017-09-24 02:08:10 UTC

Apologies, meant to cc Carlos (acme maintainer)

Comment 4 Kubilay Kocak freebsd_committer

2017-09-24 02:26:40 UTC

The root cause is the recent py-openssl update [1], which shouldn't have landed before cryptography was updated to >= 1.9.0 as specified in requirements. Original committer is CC'd.

I have a cryptography update in progress

[1] http://svnweb.freebsd.org/changeset/ports/450350

Comment 5 Kubilay Kocak freebsd_committer

2017-09-24 02:33:49 UTC

Track both dependencies correctly

Comment 6 Carlos J. Puga Medina freebsd_committer

2017-09-24 10:03:12 UTC

(In reply to Kubilay Kocak from comment #2)

I created a new review to update py-{acme,certbot} to 0.18.2

Comment 7 Kubilay Kocak freebsd_committer

2017-09-24 11:57:53 UTC

Thanks @Carlos. Per comment 2 I already have the changes in progress (locally) for a separately reported issue.

Would you like a review on acme changes (portversion/distinfo diff only) or would you like to provide implicit approval?

Technically this issue has already been resolved after cryptography was updated to 2.0.3 (bug 222519).

Comment 8 Carlos J. Puga Medina freebsd_committer

2017-09-24 12:06:14 UTC

(In reply to Kubilay Kocak from comment #7)

Nice! I provide my implicit approval.

Thanks Kubilay

Comment 9 Kubilay Kocak freebsd_committer

2017-09-25 09:28:57 UTC

Both dependent issues have now been resolved, which resolves this issue.

Thank for your repoert Kamigishi

Comment 10 vali gholami 2017-11-26 20:49:44 UTC

MARKED AS SPAM