diff --git a/confluent_server/confluent/util.py b/confluent_server/confluent/util.py index 4d46ee60..77fcf696 100644 --- a/confluent_server/confluent/util.py +++ b/confluent_server/confluent/util.py @@ -34,7 +34,10 @@ import ssl import struct import eventlet.green.subprocess as subprocess import cryptography.x509 as x509 -import cryptography.x509.verification as verification +try: + import cryptography.x509.verification as verification +except ImportError: + verification = None @@ -307,7 +310,7 @@ class TLSCertVerifier(object): # Mismatches, but try more traditional validation using the site CAs if self.subject: try: - if self.verify_by_ca(certificate): + if verification and self.verify_by_ca(certificate): auditlog = log.Logger('audit') auditlog.log({'node': self.node, 'event': 'certautoupdate', 'fingerprint': fingerprint})