cyberark-conjur-cli icon indicating copy to clipboard operation
cyberark-conjur-cli copied to clipboard

Published 20 hours ago • verified publisher icon cyberark

Investigate usage of cryptography lib

Open tzheleznyak opened this issue 4 years ago • 0 comments

Python cryptography released on 7/2/21 version 3.4.1 that broke our pipeline. image

To fix it we fixed the cryptography version to 3.3.1 here : https://github.com/cyberark/conjur-api-python3/pull/183

This is a temporary fix and may raise security risk in the future.

  • [ ] Investigate how to install latest cryptography. Maybe they will release a fix meanwhile.
  • [ ] If there is no option to use latest cryptography investigate alternatives to openssl
  • [ ] Replace the fixed usage of cryptography version 3.3.1

tzheleznyak avatar Feb 08 '21 10:02 tzheleznyak