Deprecate pyOpenSSL support in openssl_pkcs12

[felixfontein]

SUMMARY

PyOpenSSL 23.3.0 dropped support for PKCS#12, so the module only supports older version of pyOpenSSL.

We should eventually deprecate the pyOpenSSL backend for this module. This is the last module that still supports pyOpenSSL in this collection.

PKCS#12 support was only added to cryptography in 3.0 (released in July 2020), so we probably should wait some time. The removal should only happen once all LTS versions of mainstream distros have cryptography >= 3.0.

Debian Buster still has cryptography 2.6.1 (https://packages.debian.org/buster/python3-cryptography), but Bullseye already has 3.3.2. CentOS Stream 8 has 3.2.1, OpenSuSE Leap 15.2 has 2.8 (15.4 has 3.3.2), Ubuntu 20.04 has 2.8 (22.04 has 3.4.8), Rocky Linux 8 has 3.2.1.

Ubuntu 20.04 LTS support ends in April 2025, Debian Buster LTS support in June 2024. No idea which version RHEL 7 has and how long they are supported.

ISSUE TYPE

• Bug Report

COMPONENT NAME

openssl_pkcs12