Skip to content

Admin: Use cryptography instead of OpenSSL #12476

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

bblommers
Copy link
Contributor

Motivation

The PyOpenSSL module explicitly suggests that users should use the standard cryptography module instead.

As far as I can tell, all SSL-related functions within LocalStack (Pro) now use cryptography, so this both simplifies the implementation, and reduces the mental load for developers.

I was hoping to be able to remove the dependency as well, just to make LocalStack's footprint a little smaller, but unfortunately twisted still uses it. 😢

@bblommers bblommers added the semver: patch Non-breaking changes which can be included in patch releases label Apr 3, 2025
@bblommers bblommers added this to the Playground milestone Apr 3, 2025
@bblommers bblommers requested review from thrau and silv-io April 3, 2025 11:40
Copy link

github-actions bot commented Apr 3, 2025

S3 Image Test Results (AMD64 / ARM64)

  2 files  ±0    2 suites  ±0   9m 12s ⏱️ + 1m 2s
488 tests ±0  438 ✅ ±0   50 💤 ±0  0 ❌ ±0 
976 runs  ±0  876 ✅ ±0  100 💤 ±0  0 ❌ ±0 

Results for commit 523f899. ± Comparison against base commit 9e84b8d.

♻️ This comment has been updated with latest results.

Copy link

github-actions bot commented Apr 3, 2025

LocalStack Community integration with Pro

    2 files  ±0      2 suites  ±0   1h 53m 48s ⏱️ +32s
4 372 tests ±0  4 014 ✅  - 1  357 💤 ±0  1 ❌ +1 
4 374 runs  ±0  4 014 ✅  - 1  359 💤 ±0  1 ❌ +1 

For more details on these failures, see this check.

Results for commit 523f899. ± Comparison against base commit 9e84b8d.

♻️ This comment has been updated with latest results.

@bblommers
Copy link
Contributor Author

This is dependent on getmoto/moto#8761 being part of Moto-ext - will revisit this once that's merged.

@bblommers bblommers force-pushed the admin/remove-openssl-dep branch from 8015bb9 to 523f899 Compare April 17, 2025 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
semver: patch Non-breaking changes which can be included in patch releases
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant