Move confcom away from openssl-1.1 #8995
Description
Describe the bug
Currently, the confcom extension depends on openssl 1.1 (at least for katapolicygen). Since openssl 1.1 is EOL, is it possible to move away to a newer openssl version?
Related command
az confcom katapolicygen --print-version
Errors
No command errors (except if openssl 1.1 isn't installed) but there isn't a question template so I used this one :)
Issue script & Debug output
DEBUG: cli.knack.cli: Command arguments: ['confcom', 'katapolicygen', '--print-version', '--debug']
DEBUG: cli.knack.cli: init debug log:
Cannot enable color.
DEBUG: cli.knack.cli: Event: Cli.PreExecute []
DEBUG: cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x7ff8169b6fc0>, <function OutputProducer.on_global_arguments at 0x7ff8167ac4a0>, <function CLIQuery.on_global_arguments at 0x7ff8167d28e0>]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
DEBUG: cli.azure.cli.core: Command index version or cloud profile is invalid or doesn't match the current command.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core: Command index has been invalidated.
DEBUG: cli.azure.cli.core: No module found from index for '['confcom', 'katapolicygen', '--print-version', '--debug']'
DEBUG: cli.azure.cli.core: Loading all modules and extensions
DEBUG: cli.azure.cli.core: Discovered command modules: ['acr', 'acs', 'advisor', 'ams', 'apim', 'appconfig', 'appservice', 'aro', 'backup', 'batch', 'batchai', 'billing', 'botservice', 'cdn', 'cloud', 'cognitiveservices', 'compute_recommender', 'computefleet', 'config', 'configure', 'consumption', 'container', 'containerapp', 'cosmosdb', 'databoxedge', 'dls', 'dms', 'eventgrid', 'eventhubs', 'extension', 'feedback', 'find', 'hdinsight', 'identity', 'interactive', 'iot', 'keyvault', 'lab', 'managedservices', 'maps', 'marketplaceordering', 'monitor', 'mysql', 'netappfiles', 'network', 'policyinsights', 'privatedns', 'profile', 'rdbms', 'redis', 'relay', 'resource', 'role', 'search', 'security', 'servicebus', 'serviceconnector', 'servicefabric', 'signalr', 'sql', 'sqlvm', 'storage', 'synapse', 'util', 'vm']
DEBUG: cli.azure.cli.core: Loading command modules:
DEBUG: cli.azure.cli.core: Name Load Time Groups Commands
DEBUG: cli.azure.cli.core: acr 0.103 36 149
DEBUG: cli.azure.cli.core: acs 0.015 15 79
DEBUG: cli.azure.cli.core: advisor 0.001 3 6
DEBUG: cli.azure.cli.core: ams 0.003 22 100
DEBUG: cli.azure.cli.core: apim 0.002 14 69
DEBUG: cli.azure.cli.core: appconfig 0.001 9 47
DEBUG: cli.azure.cli.core: appservice 0.012 80 277
DEBUG: cli.azure.cli.core: aro 0.004 1 10
DEBUG: cli.azure.cli.core: backup 0.002 16 60
DEBUG: cli.azure.cli.core: batch 0.030 32 96
DEBUG: cli.azure.cli.core: batchai 0.001 10 30
DEBUG: cli.azure.cli.core: billing 0.007 19 53
DEBUG: cli.azure.cli.core: botservice 0.001 12 42
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:132: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
if self.AZ_PREVIEW_INFO:
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:133: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
self.preview_info = self.AZ_PREVIEW_INFO(cli_ctx=self.cli_ctx)
DEBUG: cli.azure.cli.core: cdn 0.093 8 50
DEBUG: cli.azure.cli.core: cloud 0.001 1 7
DEBUG: cli.azure.cli.core: cognitiveservices 0.001 10 33
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:50: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
if self.AZ_PREVIEW_INFO:
/nix/store/aaasvrfdrjp8r2znk6vv7abh6xr67n2v-python3.13-azure-cli-core-2.75.0/lib/python3.13/site-packages/azure/cli/core/aaz/_command.py:51: FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in staticmethod() if you want to preserve the old behavior
self.group_kwargs['preview_info'] = self.AZ_PREVIEW_INFO(cli_ctx=self.cli_ctx)
DEBUG: cli.azure.cli.core: compute_recommender 0.001 1 1
DEBUG: cli.azure.cli.core: computefleet 0.004 1 1
DEBUG: cli.azure.cli.core: config 0.003 2 7
DEBUG: cli.azure.cli.core: configure 0.000 2 5
DEBUG: cli.azure.cli.core: consumption 0.007 8 9
DEBUG: cli.azure.cli.core: container 0.005 2 17
DEBUG: cli.azure.cli.core: containerapp 0.056 37 123
DEBUG: cli.azure.cli.core: cosmosdb 0.007 58 200
DEBUG: cli.azure.cli.core: databoxedge 0.003 5 28
DEBUG: cli.azure.cli.core: dls 0.001 6 36
DEBUG: cli.azure.cli.core: dms 0.001 3 22
DEBUG: cli.azure.cli.core: eventgrid 0.003 25 96
DEBUG: cli.azure.cli.core: eventhubs 0.006 14 21
DEBUG: cli.azure.cli.core: extension 0.000 1 7
DEBUG: cli.azure.cli.core: feedback 0.000 1 2
DEBUG: cli.azure.cli.core: find 0.000 1 1
DEBUG: cli.azure.cli.core: hdinsight 0.003 9 42
DEBUG: cli.azure.cli.core: identity 0.003 2 7
DEBUG: cli.azure.cli.core: interactive 0.000 1 1
DEBUG: cli.azure.cli.core: iot 0.049 19 82
DEBUG: cli.azure.cli.core: keyvault 0.004 20 114
DEBUG: cli.azure.cli.core: lab 0.014 9 30
DEBUG: cli.azure.cli.core: managedservices 0.004 3 8
DEBUG: cli.azure.cli.core: maps 0.001 5 13
DEBUG: cli.azure.cli.core: marketplaceordering 0.001 1 2
DEBUG: cli.azure.cli.core: monitor 0.303 18 64
DEBUG: cli.azure.cli.core: mysql 0.043 16 56
DEBUG: cli.azure.cli.core: netappfiles 0.020 8 15
DEBUG: cli.azure.cli.core: network 0.072 106 351
DEBUG: cli.azure.cli.core: policyinsights 0.005 9 17
DEBUG: cli.azure.cli.core: privatedns 0.008 14 60
DEBUG: cli.azure.cli.core: profile 0.001 2 8
DEBUG: cli.azure.cli.core: rdbms 0.046 52 217
DEBUG: cli.azure.cli.core: redis 0.001 7 38
DEBUG: cli.azure.cli.core: relay 0.010 7 8
DEBUG: cli.azure.cli.core: resource 0.008 52 232
DEBUG: cli.azure.cli.core: role 0.002 17 62
DEBUG: cli.azure.cli.core: search 0.003 7 19
DEBUG: cli.azure.cli.core: security 0.005 48 98
DEBUG: cli.azure.cli.core: servicebus 0.004 13 17
DEBUG: cli.azure.cli.core: serviceconnector 0.022 20 331
DEBUG: cli.azure.cli.core: servicefabric 0.007 27 80
DEBUG: cli.azure.cli.core: signalr 0.001 10 42
DEBUG: cli.azure.cli.core: sql 0.007 56 215
DEBUG: cli.azure.cli.core: sqlvm 0.016 4 20
DEBUG: cli.azure.cli.core: storage 0.029 60 275
DEBUG: cli.azure.cli.core: synapse 0.006 54 246
DEBUG: cli.azure.cli.core: util 0.001 3 7
DEBUG: cli.azure.cli.core: vm 0.050 59 213
DEBUG: cli.azure.cli.core: Total (65) 1.126 1193 4674
DEBUG: cli.azure.cli.core: Loading extensions:
DEBUG: cli.azure.cli.core: Name Load Time Groups Commands Directory
DEBUG: cli.azure.cli.core: confcom 0.003 1 3 /nix/store/5c9v8hpdharbd2f3x2m6b0as88cps5ja-azure-cli-extensions/confcom
DEBUG: cli.azure.cli.core: Total (1) 0.003 1 3
DEBUG: cli.azure.cli.core: Loaded 1180 groups, 4677 commands.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core._session: Skipping update of file /nix/store/r6zhibxfkf70ff00xc8jm8fz9f65s19p-python3.13-azure-cli-2.75.0/etc/azure/commandIndex.json due to immutable directory.
DEBUG: cli.azure.cli.core: Updated command index in 0.002 seconds.
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x7ff81527ea20>]
DEBUG: cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/motte/.azure/commands/2025-07-23.15-13-13.confcom_katapolicygen.121246.log'.
INFO: az_command_data_logger: command args: confcom katapolicygen --print-version --debug
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x7ff8152b49a0>]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x7ff8152b6ca0>, <function register_cache_arguments..add_cache_arguments at 0x7ff8152b6de0>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x7ff8152b6e80>]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreParseArgs [<function _documentdb_deprecate at 0x7ff81393cae0>]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x7ff8167ac540>, <function CLIQuery.handle_query_parameter at 0x7ff8167d2980>, <function register_ids_argument..parse_ids_arguments at 0x7ff8152b6d40>]
INFO: az_command_data_logger: extension name: confcom
INFO: az_command_data_logger: extension version: 1.2.6
Kata Containers policy tool (Rust): id: genpolicy, version: 3.2.0-azl3.genpolicy3, commit: 89277ccba9e11234c350cb27b8745b1160199440
DEBUG: cli.knack.cli: Event: CommandInvoker.OnTransformResult [<function _resource_group_transform at 0x7ff81529f560>, <function _x509_from_base64_to_hex_transform at 0x7ff81529f600>]
DEBUG: cli.knack.cli: Event: CommandInvoker.OnFilterResult []
DEBUG: cli.knack.cli: Event: Cli.SuccessfulExecute []
DEBUG: cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x7ff81527eca0>]
INFO: az_command_data_logger: exit code: 0
INFO: cli.main: Command ran in 1.496 seconds (init: 0.237, invoke: 1.259)
INFO: telemetry.main: Begin splitting cli events and extra events, total events: 1
INFO: telemetry.client: Accumulated 0 events. Flush the clients.
INFO: telemetry.main: Finish splitting cli events and extra events, cli events: 1
INFO: telemetry.save: Save telemetry record of length 3897 in cache file under /home/motte/.azure/telemetry/20250723151313566
INFO: telemetry.main: Begin creating telemetry upload process.
INFO: telemetry.process: Creating upload process: "/nix/store/djck7mx6jad1w0yy6zings96dyxanls6-python3-3.13.5/bin/python3.13 /nix/store/wf55523dxyybczx6nqs6m69xyylnqcbf-python3.13-azure-cli-telemetry-1.1.0/lib/python3.13/site-packages/azure/cli/telemetry/init.py /home/motte/.azure /home/motte/.azure/telemetry/20250723151313566"
INFO: telemetry.process: Return from creating process 121307
INFO: telemetry.main: Finish creating telemetry upload process.
Expected behavior
confcom doesn't depend on openssl 1.1 so people don't have to install an outdated version of openssl.
Environment Summary
azure-cli 2.75.0
core 2.75.0
telemetry 1.1.0
Extensions:
confcom 1.2.6
Dependencies:
msal 1.32.3
azure-mgmt-resource 23.4.0
Python location '/nix/store/djck7mx6jad1w0yy6zings96dyxanls6-python3-3.13.5/bin/python3.13'
Config directory '/home/motte/.azure'
Extensions directory '/nix/store/5c9v8hpdharbd2f3x2m6b0as88cps5ja-azure-cli-extensions'
Python (Linux) 3.13.5 (main, Jun 11 2025, 15:36:57) [GCC 14.3.0]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
Additional context
I am maintaining the confcom extension for nixpkgs. Per issue NixOS/nixpkgs#269713, all packages that depend on the openssl-1-1 package should be removed soon.