Implement PyOpenSSL deprecated functions as calls into Cryptography library

[justineakehurst]

Implement PyOpenSSL deprecated functions as calls into Cryptography library

[alex]

Unfortunately, the pyOpenSSL APIs tend to be very badly designed, and therefore don't lend themselves to being implemented on top of pyca/cryptography's better APIs.

[justineakehurst]

Unfortunately, the pyOpenSSL APIs tend to be very badly designed, and therefore don't lend themselves to being implemented on top of pyca/cryptography's better APIs.

Given this information, what guidance can you give folks on a method-by-method basis to migrate themselves over to the Cryptography library?

[alex]

I would suggest folks identify what features of pyOpenSSL they are using, and particularly the "edges" of their usage (e.g., loading keys from disk), and then identify the equivilant functionality in pyca/cryptography and migrate to it.

In some cases, pyOpenSSL also offers to_cryptography() methods on various types (e.g., X509 certificates) that can be used for partial migrations.