python-cryptography: update to 49.0.0

[ognevny]

No description provided.

[ognevny]

  error: linking with `x86_64-w64-mingw32-gcc` failed: exit code: 1
    |
    = note: "x86_64-w64-mingw32-gcc" "-Wl,D:\\_\\B\\src\\python-build-UCRT64\\target\\release\\deps\\rustcUiO9xL\\list.def" "-fno-use-linker-plugin" "-Wl,--dynamicbase" "-Wl,--disable-auto-image-base" "-m64" "-Wl,--high-entropy-va" "D:\\_\\B\\src\\python-build-UCRT64\\target\\release\\deps\\rustcUiO9xL\\symbols.o" "<17 object files omitted>" "-Wl,-Bstatic" "D:\\_\\B\\src\\python-build-UCRT64\\target\\release\\deps/{libcryptography_cffi-bd59fbee0eb59e02,libcryptography_keepalive-68829479ab813d2d,libself_cell-dea64d1da82648b0,libcryptography_x509_verification-d1592fb74932728d,libcryptography_key_parsing-b9d42456a873803b,libpem-bf6379b5700efa02,libcryptography_openssl-61de2f1aa0bc0fb6,libbase64-f88bccd493762ff7,libcryptography_crypto-00a46ea35fe25c6b,libcryptography_x509-e5db47411c180b2f,libasn1-d1883ac09273dbe3,libitoa-0efe3a9074d82e10,libpyo3-352d5922a6367da2,libonce_cell-768700bda5b9d8a9,libpyo3_ffi-48540323b8c5a3e7,libopenssl-b4da30a6c91bc7ff,libbitflags-b12d13a6d4d3bdf5,libcfg_if-fc26b24cab6e05f5,libforeign_types-784fcf9760e1a679,libforeign_types_shared-75a10d3596a47890,libopenssl_sys-1a20322a1f5be160,liblibc-c87f1baf6bdfeeb6}.rlib" "<sysroot>\\lib\\rustlib\\x86_64-pc-windows-gnu\\lib/{libstd-*,libpanic_unwind-*,libobject-*,libmemchr-*,libaddr2line-*,libgimli-*,libcfg_if-*,libwindows_link-*,librustc_demangle-*,libstd_detect-*,libhashbrown-*,librustc_std_workspace_alloc-*,libminiz_oxide-*,libadler2-*,libunwind-*,liblibc-*,librustc_std_workspace_core-*,liballoc-*,libcore-*,libcompiler_builtins-*}.rlib" "-Wl,-Bdynamic" "-lssl" "-lcrypto" "-lkernel32" "-lkernel32" "-lkernel32" "-lntdll" "-luserenv" "-lws2_32" "-ldbghelp" "-lgcc_eh" "-l:libpthread.a" "-lmsvcrt" "-lmingwex" "-lmingw32" "-lgcc" "-lmsvcrt" "-lmingwex" "-luser32" "-lkernel32" "-Wl,--nxcompat" "-L" "D:\\_\\B\\src\\python-build-UCRT64\\target\\release\\build\\cryptography-cffi-7c99c6514e52c864\\out" "-L" "D:/M/msys64/ucrt64/libs" "-o" "D:\\_\\B\\src\\python-build-UCRT64\\target\\release\\deps\\cryptography_rust.dll" "-Wl,--gc-sections" "-shared" "-Wl,--out-implib=D:\\_\\B\\src\\python-build-UCRT64\\target\\release\\deps\\libcryptography_rust.dll.a" "-Wl,-O1" "-Wl,--strip-debug" "-nodefaultlibs"
    = note: some arguments are omitted. use `--verbose` to show all linker arguments
    = note: D:/M/msys64/ucrt64/lib/gcc/x86_64-w64-mingw32/16.1.0/../../../../x86_64-w64-mingw32/bin/ld.exe: D:\_\B\src\python-build-UCRT64\target\release\deps\libcryptography_cffi-bd59fbee0eb59e02.rlib(e926d15ae519cd8f-_openssl.o):_openssl.c:(.text$_cffi_f_SSL_set_tlsext_host_name+0x193): undefined reference to `__imp__Py_NoneStruct'
            D:/M/msys64/ucrt64/lib/gcc/x86_64-w64-mingw32/16.1.0/../../../../x86_64-w64-mingw32/bin/ld.exe: D:\_\B\src\python-build-UCRT64\target\release\deps\libcryptography_cffi-bd59fbee0eb59e02.rlib(e926d15ae519cd8f-_openssl.o):_openssl.c:(.text$_cffi_f_sk_X509_free+0xd3): undefined reference to `__imp__Py_NoneStruct'
            D:/M/msys64/ucrt64/lib/gcc/x86_64-w64-mingw32/16.1.0/../../../../x86_64-w64-mingw32/bin/ld.exe: D:\_\B\src\python-build-UCRT64\target\release\deps\libcryptography_cffi-bd59fbee0eb59e02.rlib(e926d15ae519cd8f-_openssl.o):_openssl.c:(.text$_cffi_f_sk_X509_NAME_free+0xd3): undefined reference to `__imp__Py_NoneStruct'
            D:/M/msys64/ucrt64/lib/gcc/x86_64-w64-mingw32/16.1.0/../../../../x86_64-w64-mingw32/bin/ld.exe: D:\_\B\src\python-build-UCRT64\target\release\deps\libcryptography_cffi-bd59fbee0eb59e02.rlib(e926d15ae519cd8f-_openssl.o):_openssl.c:(.text$_cffi_f_X509_free+0xd3): undefined reference to `__imp__Py_NoneStruct'
            D:/M/msys64/ucrt64/lib/gcc/x86_64-w64-mingw32/16.1.0/../../../../x86_64-w64-mingw32/bin/ld.exe: D:\_\B\src\python-build-UCRT64\target\release\deps\libcryptography_cffi-bd59fbee0eb59e02.rlib(e926d15ae519cd8f-_openssl.o):_openssl.c:(.text$_cffi_f_X509_VERIFY_PARAM_set_time+0x133): undefined reference to `__imp__Py_NoneStruct'
            D:/M/msys64/ucrt64/lib/gcc/x86_64-w64-mingw32/16.1.0/../../../../x86_64-w64-mingw32/bin/ld.exe: D:\_\B\src\python-build-UCRT64\target\release\deps\libcryptography_cffi-bd59fbee0eb59e02.rlib(e926d15ae519cd8f-_openssl.o):_openssl.c:(.text$_cffi_f_X509_VERIFY_PARAM_set_hostflags+0x133): more undefined references to `__imp__Py_NoneStruct' follow
            collect2.exe: error: ld returned 1 exit status
            
    = note: some `extern` functions couldn't be found; some native libraries may need to be installed or have their path specified
    = note: use the `-l` flag to specify native libraries to link
    = note: use the `cargo:rustc-link-lib` directive to specify the native libraries to link with Cargo (see https://doc.rust-lang.org/cargo/reference/build-scripts.html#rustc-link-lib)

[lazka]

pyca/cryptography@986abbf

[ognevny]

so that's pyo3 regression?

[lazka]

yeah, I don't quite get it... I thought it's because the wrongdir is hardcoded, but it doesn't link anymore as well.

[lazka]

I guess the cause is PyO3/pyo3#5866 - seems they hardcode various things there.

[lazka]

while it builds now, it doesn't work:

$ python3 -c "from cryptography.hazmat.primitives import hashes, hmac"
Traceback (most recent call last):
  File "<string>", line 1, in <module>
    from cryptography.hazmat.primitives import hashes, hmac
  File "C:/msys64/clang64/lib/python3.14/site-packages/cryptography/hazmat/primitives/hashes.py", line 9, in <module>
    from cryptography.hazmat.bindings._rust import openssl as rust_openssl
ImportError: DLL load failed while importing _rust: The specified module could not be found.

[ognevny]

they used cool rust feature, but made it so bad 😩

[ognevny]

while it builds now, it doesn't work:

$ python3 -c "from cryptography.hazmat.primitives import hashes, hmac"
Traceback (most recent call last):
  File "<string>", line 1, in <module>
    from cryptography.hazmat.primitives import hashes, hmac
  File "C:/msys64/clang64/lib/python3.14/site-packages/cryptography/hazmat/primitives/hashes.py", line 9, in <module>
    from cryptography.hazmat.bindings._rust import openssl as rust_openssl
ImportError: DLL load failed while importing _rust: The specified module could not be found.

thankfully we shouldn't rush because pyopenssl still doesn't accept cryptography-49

[lazka]

it seems link against "python3.dll" explicitly instead of "libpython3.dll"

[ognevny]

help wanted in PyO3/pyo3#6159

[ognevny]

ready with properly patched things

[ognevny]

applied PyO3/pyo3#6185 which is seems to be a final solution for the issue (requires an environment variable to be set)

[davidhewitt]

For what it's worth, I'm sorry that this has caused such a frustrating breakage for you here.

In hindsight we really should have had the opt-out pathway I'm adding in PyO3/pyo3#6185 as part of PyO3 0.29 when the new raw-dylib linking was introduced. It is clear that with a hardcoded set there it would never work for all users.

[davidhewitt]

I think that you shouldn't need to set this - I think that PyO3 should automatically notice that your lib name isn't in the hardcoded set which support raw-dylib linking and toggle this mode automatically.

(Hopefully in the future the raw-dylib link set shouldn't be hardcoded, this seems to be a limitation in rustc and I'll work to fix it there.)

[ognevny]

without env var it didn't work:(

[davidhewitt]

Can you please retry with latest commit PyO3/pyo3@9451f0e ? I think that should now remove the need for the env var properly (so mingw users do not need to set this for their arbitrary builds)

[ognevny]

I'll try later in the evening

[ognevny]

I'll push these hunks, but it didn't work on my machine

[davidhewitt]

ok, thanks. I guess we keep it like this for now in the patch release, I'll work on a better long-term fix upstream.