Will Bond

I appreciate your interest in contributing @wiml. I don't have time to work on this now, and probably not for a while. That said, I wouldn't plan on merging until...

I'm open to someone implementing this if it is done in a way that doesn't cause issues with Python 2, which this still supports.

Do you know what kind of key it was (RSA, DSA, etc) and what size it was?

Actually, from the trace, it must have been an RSA key. If you can determine the key size, that would be helpful for improving the error message.

Could you try a 4096 bit key and see if it errors? 2048 is pretty small for 2022. I recently renewed my code signing cert and Sectigo wouldn’t let me...

Is the certificate an RSAPSS cert?

I had run into issues with OpenSSL 3 on macOS. I think I also made a VMWare image of 22.04 for testing. Either way, we should make sure this config...

I think at this point some info about the legacy module being present (maybe results of `ls`) and how legacy functions aren’t working would be a good start. More or...

Right now both before and after this PR all of CI passes, so we just need to make sure we have a failing test that changes to successful.

oscrypto just hasn’t bubbled up to the top of my open source priority queue yet. In the meantime, feel free to test this PR out in your stack.