← Back to issue list

fix: set CRYPTOGRAPHY_OPENSSL_NO_LEGACY

View original Github issue

Metadata

Project
snapcraft
Number
#4784
Type
pull request
State
merged
Author
mr-cal
Labels
—
Created
Updated
Closed

Current evaluation

PR #4784 by mr-cal merged as commit 7aeffed19, setting CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 in snap/snapcraft.yaml so cryptography>=42 works on Ubuntu 20.04 armhf/ppc64el/riscv64/s390x. Fixes LP#2064639.

Resolution: closed resolved

Reason: The PR was merged into snapcraft (commit 7aeffed19 "fix: set CRYPTOGRAPHY_OPENSSL_NO_LEGACY (#4784)") with two approving reviewers and no outstanding comments; the env var is now present in snap/snapcraft.yaml, resolving the legacy-algorithm load failures tracked as LP#2064639.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you followed the [guidelines for contributing](https://github.com/snapcore/snapcraft/blob/master/CONTRIBUTING.md)? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [x] Have you successfully run `tox run -m lint`? - [x] Have you successfully run `tox run -e test-py310`? (supported versions: `py39`, `py310`, `py311`, `py312`) ----- cryptography>=42.0 cannot load legacy algorithms on Ubuntu 20.04 for armhf, ppc64el, riscv64, and s390x. @cmatsuoka was able to verify this fix in an emulated riscv64 20.04 machine from [here](https://cdimage.ubuntu.com/releases/20.04/release/). See https://cryptography.io/en/latest/openssl/#legacy-provider-in-openssl-3-x for details on legacy algorithms. Fixes [LP#2064639](https://bugs.launchpad.net/snapcraft/+bug/2064639)

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved PR #4784 by mr-cal merged as commit 7aeffed19, setting CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 in snap/snapcraft.yaml so cryptography>=42 works on Ubuntu 20.04 armhf/ppc64el/riscv64/s390x. Fixes LP#2064639.
stealth/space-bunny-alpha — closed resolved Merged PR #4784 set CRYPTOGRAPHY_OPENSSL_NO_LEGACY, fixing cryptography 42+ legacy-algorithm failures on Ubuntu 20.04 for armhf, ppc64el, riscv64 and s390x (LP#2064639).
qwen/qwen3.6-35b-a3b — — Merged fix for cryptography>=42.0 legacy algorithm failures on Ubuntu 20.04 (armhf, ppc64el, riscv64, s390x). Resolution sets CRYPTOGRAPHY_OPENSSL_NO_LEGACY. Approved by two reviewers, passed CI, and closes Launchpad bug #2064639.
qwen3.6-35b-a3b-mtp-q6 — — Merged to set CRYPTOGRAPHY_OPENSSL_NO_LEGACY, resolving cryptography>=42.0 legacy algorithm loading failures on Ubuntu 20.04 for armhf, ppc64el, riscv64, and s390x. Closes LP#2064639.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#2064639 snapcraft remote-build core20 armhf openssl error snapcraft (launchpad) closed armhf/riscv64/ppc64el/s390x remote-build failed on core20 after cryptography 42.0.5 broke the OpenSSL legacy provider. Fixed by merged PR canonical/snapcraft#4784 (commit 7aeffed19), setting CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 in the snap manifest; LP#2064639 closed as fixed.
80%