pyasn1 0.4.4 fails: TagSet not in asn1Spec

[tiran]

A user has reported that pyasn1 0.4.4 breaks FreeIPA, https://pagure.io/freeipa/issue/7685. The code works fine with pyasn1 0.3.7.

 File "/usr/lib/python3/site-packages/ipalib/x509.py", line 351, in __pyasn1_get_san_general_names
   ext['extnValue'], asn1Spec=univ.OctetString())[0]
 File "/usr/lib/python3/site-packages/pyasn1/codec/ber/decoder.py", line 1318, in __call__
  '%s not in asn1Spec: %r' % (tagSet, asn1Spec)
pyasn1.error.PyAsn1Error: <TagSet object at 0x7f4780535978 tags 0:32:16> not in asn1Spec: <OctetString schema object at 0x7f47803e6cf8 tagSet <TagSet object at 0x7f479bb28d68 tags 0:0:4> encoding iso-8859-1>

The code for the function is in ipalib.x509, https://github.com/freeipa/freeipa/blob/master/ipalib/x509.py#L294

[etingof]

Thank you for raising this and sorry for the hiccup!

I've followed up this issue at pagure.io.