Arch Linux User Repository

Thanks @ashwinkj, you also helped me!

Thank you @ashwinkj, I just had the same issue and your comment helped me solve it quickly enough.

After upgrading to openssl-3.0, I am getting "UNSAFE_LEGACY_RENEGOTIATION_DISABLED" error. There is a work around mentioned at issue #81.

Edit: It turns out to be a problem with outdated configuration of the server I was connecting to. But since that can be outside of our control, I will leave my comment in case it helps someone else.

This seems to be a python-keyring packaging issue. I'm applying a workaround until it gets investigated and fixed.

Thanks ashwinkj, installing python-jaraco.classes (sudo pacman -S python-jaraco.classes) did the trick for me

I've also the same problem described by ashwinkj with jaraco.classes

Not sure what changed recently, but I had to add python-jaraco.classes to depends to get it to work. Otherwise I am getting the following error

Traceback (most recent call last):
  File "/usr/bin/openconnect-sso", line 33, in <module>
    sys.exit(load_entry_point('openconnect-sso==0.8.0', 'console_scripts', 'openconnect-sso')())
  File "/usr/bin/openconnect-sso", line 25, in importlib_load_entry_point
    return next(matches).load()
  File "/usr/lib/python3.10/importlib/metadata/__init__.py", line 171, in load
    module = import_module(match.group('module'))
  File "/usr/lib/python3.10/importlib/__init__.py", line 126, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
  File "<frozen importlib._bootstrap>", line 1050, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1027, in _find_and_load
  File "<frozen importlib._bootstrap>", line 1006, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 688, in _load_unlocked
  File "<frozen importlib._bootstrap_external>", line 883, in exec_module
  File "<frozen importlib._bootstrap>", line 241, in _call_with_frames_removed
  File "/usr/lib/python3.10/site-packages/openconnect_sso/cli.py", line 10, in <module>
    from openconnect_sso import app, config, __version__
  File "/usr/lib/python3.10/site-packages/openconnect_sso/app.py", line 16, in <module>
    from openconnect_sso.authenticator import Authenticator, AuthResponseError
  File "/usr/lib/python3.10/site-packages/openconnect_sso/authenticator.py", line 6, in <module>
    from openconnect_sso.saml_authenticator import authenticate_in_browser
  File "/usr/lib/python3.10/site-packages/openconnect_sso/saml_authenticator.py", line 3, in <module>
    from openconnect_sso.browser import Browser
  File "/usr/lib/python3.10/site-packages/openconnect_sso/browser/__init__.py", line 1, in <module>
    from .browser import Browser, DisplayMode, Terminated
  File "/usr/lib/python3.10/site-packages/openconnect_sso/browser/browser.py", line 5, in <module>
    from . import webengine_process as web
  File "/usr/lib/python3.10/site-packages/openconnect_sso/browser/webengine_process.py", line 9, in <module>
    import pkg_resources
  File "/usr/lib/python3.10/site-packages/pkg_resources/__init__.py", line 3260, in <module>
    def _initialize_master_working_set():
  File "/usr/lib/python3.10/site-packages/pkg_resources/__init__.py", line 3234, in _call_aside
    f(*args, **kwargs)
  File "/usr/lib/python3.10/site-packages/pkg_resources/__init__.py", line 3272, in _initialize_master_working_set
    working_set = WorkingSet._build_master()
  File "/usr/lib/python3.10/site-packages/pkg_resources/__init__.py", line 581, in _build_master
    ws.require(__requires__)
  File "/usr/lib/python3.10/site-packages/pkg_resources/__init__.py", line 909, in require
    needed = self.resolve(parse_requirements(requirements))
  File "/usr/lib/python3.10/site-packages/pkg_resources/__init__.py", line 795, in resolve
    raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'jaraco.classes' distribution was not found and is required by keyring

Sorry for the delay. I'm applying the patch submitted upstream until it is released officially.

If you want to get this working add this to the PKGBUILD

prepare() {
  cd "$pkgname-$pkgver"
  patch pyproject.toml < ../../pyproject.toml.patch
  patch setup.py < ../../setup.py.patch
}

and paste in the following patches,

--- setup.py.old    2022-06-14 16:34:33.229676291 +1000
+++ setup.py    2022-06-14 16:34:41.738615917 +1000
@@ -14,7 +14,7 @@
  'keyring>=21.1,<24.0.0',
  'lxml>=4.3,<5.0',
  'prompt-toolkit>=3.0.3,<4.0.0',
- 'pyxdg>=0.26,<0.28',
+ 'pyxdg>=0.26,<0.29',
  'requests>=2.22,<3.0',
  'setuptools>40.0',
  'structlog>=20.1',

--- pyproject.toml.old  2022-06-14 16:25:50.352385515 +1000
+++ pyproject.toml  2022-06-14 16:25:57.605334063 +1000
@@ -27,7 +27,7 @@
 lxml = "^4.3"
 keyring = ">=21.1, <24.0.0"
 prompt-toolkit = "^3.0.3"
-pyxdg = ">=0.26, <0.28"
+pyxdg = ">=0.26, <0.29"
 requests = "^2.22"
 structlog = ">=20.1"
 toml = "^0.10"

Seems really annoying that they hard code it to fail when a library has a minor update.

@Krasauskas I submitted a pull request upstream to fix this.

https://github.com/vlaci/openconnect-sso/pull/85

Downgrading python-pyxdg to v0.27 works in the meantime.