Felix Fontein

Are you talking about the community.crypto.get_certificate module? That module does not use a proxy by default. It uses [`socket.create_connection()`](https://docs.python.org/3/library/socket.html#socket.create_connection) to connect if no proxy is configured with `proxy_host` and `proxy_port`.

The module only needs cryptography. cffi is a transitive dependency needed by cryptography: https://github.com/pyca/cryptography/blob/main/pyproject.toml#L52

The issue you are linking is about [PyPy](https://en.wikipedia.org/wiki/PyPy) (another Python engine), not [PyPI](https://pypi.org/) (the Python package index). If you install cryptography via pip (or any other proper resolver) for CPython...

> Not being quite this level of Python expert, the `_cffi_backend.cpython-310-x86_64-linux-gnu.so` seems somewhat suspicious to me, in that Python 3.11 maybe isn't able to dynamically load that shared library that's...

Thanks for your contribution! As a first quick comment, please take a look at https://github.com/ansible-collections/community.general/blob/main/CONTRIBUTING.md#creating-new-modules-or-plugins if you haven't.

You probably have some auto-formatting enabled in your editor (the extra brackets are something that black or ruff tend to insert to shorten long lines). It's probably best to disable...

PIng @mil1i

needs_info

Related: #813

> I'd like to upgrade this issue to a bug because `choices` limits the algorithms to only the ones specified without actually checking with the current implementation i.e. what `ssh-keygen`...