Bug risk: paramiko-related deprecation warning

[Andrew-S-Rosen]

Code snippet

from maggma.stores import MemoryStore

returns

C:\Users\asros\miniconda\envs\test\Lib\site-packages\paramiko\pkey.py:100: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from this module in 48.0.0.
  "cipher": algorithms.TripleDES,
C:\Users\asros\miniconda\envs\test\Lib\site-packages\paramiko\transport.py:259: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from this module in 48.0.0.
  "class": algorithms.TripleDES,

I remain a bit unsure where this is coming from. TripleDes is not directly called in maggma, so this may not be a "maggma problem" per se, but it would be worth finding the source so we can: a) inform the maintainer; b) make sure maggma doesn't break in the future.

Version

0.69.1

Which OS?

• MacOS
• Windows
• Linux

Log output

No response

[rkingsbury]

thanks for reporting @Andrew-S-Rosen

[rkingsbury]

Note: this appears to be resolved upon updating to paramiko==3.5. I'll try to bump the dependencies in maggma soon.

[rkingsbury]

As a further note to self, paramiko is required by the sshtunnel package for tunnel functionality. the sshtunnel package itself has not been updated since 2021 and lists itself in "Alpha" status. This poses some concerns. Maybe it's worth investigating an alternative way to access paramiko's SSHTunnel capabilities in maggma.

[rkingsbury]

As a further note to self, paramiko is required by the sshtunnel package for tunnel functionality. the sshtunnel package itself has not been updated since 2021 and lists itself in "Alpha" status. This poses some concerns. Maybe it's worth investigating an alternative way to access paramiko's SSHTunnel capabilities in maggma.

@jmmshn are you aware of any alternative ways of accessing ssh tunnels via python? This seems like a common use case so I was surprised to see sshtunnel not being maintained.

[jmmshn]

@jmmshn are you aware of any alternative ways of accessing ssh tunnels via python?

Not aware of any directly replacements. However I think if and when things break there are two things we can do:

1. Users can port-forward to get their entire pipeline working.
2. We can re-implement a paramiko-only solution.
3. We can fix ssh-tunnel, no reason to assume they would not be responsive.

So IMO, due to 1. the risk is not catastrophic?? We can leave the original reference from the sshtunnel repo:

https://github.com/paramiko/paramiko/blob/main/demos/forward.py

As alternative on what to do if things break.