After upgrading python-urllib3 from 1.9.1-3 to 1.19.1-1, confctl displays the following warning:
/usr/lib/python2.7/dist-packages/urllib3/connection.py:337: SubjectAltNameWarning: Certificate for conf1001.eqiad.wmnet has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.) SubjectAltNameWarning
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T294906 Puppet Improvements | |||
| Duplicate | jbond | T265138 Work required to prepare for puppet 7 | |||
| Resolved | SLyngshede-WMF | T273673 replace all puppet crons with systemd timers | |||
| Open | None | T132324 Tracking and Reducing cron-spam to root@ | |||
| Resolved | Joe | T156232 confctl SubjectAltNameWarning after python-urllib3 upgrade |
The main issue is tracked in T158757. For conftool the temporary solution is to ignore the warning:
from requests.packages.urllib3.exceptions import SubjectAltNameWarning requests.packages.urllib3.disable_warnings(SubjectAltNameWarning)
Although seems that the SubjectAltNameWarning was added only in urllib3 1.11, while conftool setup.py has 'urllib3>=1.7.1'. It might need to be updated too in case this specific warning is ignored.
@Joe: FYI