As reported on freeipa-users there are some python-cryptography deprecation warnings seen when ipa-healthcheck is executed on F41:
/usr/lib/python3.13/site-packages/ipalib/x509.py:270: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc. return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc) /usr/lib/python3.13/site-packages/ipalib/x509.py:270: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc. return self._cert.not_valid_after.replace(tzinfo=datetime.timezone.utc) /usr/lib/python3.13/site-packages/pki/nssdb.py:2070: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_before_utc. cert['not_before'] = self.convert_time_to_millis(cert_obj.not_valid_before) /usr/lib/python3.13/site-packages/pki/nssdb.py:2071: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to not_valid_after_utc. cert['not_after'] = self.convert_time_to_millis(cert_obj.not_valid_after)
freeipa-healthcheck-core-0.17-4.fc41.noarch freeipa-server-common-4.12.2-4.fc41.noarch
The pki warnings were reported in https://issues.redhat.com/browse/RHCS-5394
python3-cryptography-43.0.0-2.fc41.x86_64 dogtag-pki-ca-11.5.0-3.fc41.2.noarch
I think a mistaken reference was made in the commit. It references https://pagure.io/freeipa/issue/9518
The master branch fix is a45a7a20d96af51d463a285cb9318582720be708
Metadata Update from @rcritten: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)