Alex Gaynor

Let's try to keep this thread on topic. For the purposes of this thread, PKCS#12 + RC2 is a fact of life, we can focus on changing life elsehwere. @kroeckx...

What are you imagining in terms of how the user would configure that legacy is disabled? On Mon, Sep 23, 2024 at 11:51 PM Shaun Walbridge ***@***.***> wrote: > Would...

We could do an env var. My instinct is that it should have a separate name. I'm happy to take a PR for this On Tue, Sep 24, 2024, 10:34 ...

We'd be happy to take contributions for this yes! In terms of what needs to be done: These classes need to be deleted, and the concrete implementations should be exposed...

Please do each of these in separate pull requests, not one big one. On Fri, Oct 18, 2024 at 5:09 PM treavvasu ***@***.***> wrote: > Thanks @alex > I'll try...

Can you link to that code? On Fri, Nov 29, 2024, 10:05 AM Alexander Bokovoy ***@***.***> wrote: > The removal of Certificate abc broke FreeIPA. We implement our shim on...

Looks like the proximate way this fails is that you cannot subclass Certificate. If we made that possible again, would it resolve the issue? On Fri, Nov 29, 2024 at...

Can you test with https://github.com/pyca/cryptography/pull/12077 and verify it works? On Fri, Nov 29, 2024 at 12:03 PM Alexander Bokovoy ***@***.***> wrote: > Yes, I think so. It is literally because...

So the challenge is that we don't want `Certificate` to have a constructor -- the only way to construct the concrete Certificate is the various public APIs.

Great, thank you! On Mon, Dec 2, 2024 at 11:27 AM Alexander Bokovoy ***@***.***> wrote: > I created a PR freeipa/freeipa#7614 > that moves FreeIPA to > treat x509.Certificate as...