Hello, Good news everybody! I got Dogtag's Python code working under Python 3.4. With my patches 24-38 I'm able to run pkispawn and pkidestroy under Python 2.7 and 3.4 from the same code base. I was able to spawn a CA, KRA and OCSP responder with Python 3.4 successfully. There is still much work to do, though. I have neither tested the PKI client API nor the upgrade framework. I also suspect problems with non-ASCII paths and internationalized domain names. Packaging has to be addressed, too. I like to thank John and Miro for their hard work on Python 3 ports of NSS and pyldap. How to test under Python 3.4 ---------------------------- Install Python 3 versions of Python dependencies: # dnf install python3-lxml python3-sphinx python3-requests python3-six libselinux-python3 policycoreutils3-python Install build dependencies for pyldap and python-nss # dnf install python-dnf-plugins-core python3-pip python-tox # dnf builddep python-nss # dnf builddep python-ldap You also have to disable SELinux enforcement because seobject is missing: # setenforce 0 Now you can use a tox virtual env to install the dependencies and test the Python 3 port $ tox -e py34 (ignore the error) $ .tox/py34/bin/pip3.4 install pyldap $ .tox/py34/bin/pip3.4 install hg+https://fedorapeople.org/~jdennis/python-nss/repos/python-nss/ # .tox/py34/bin/python3.4 .tox/py34/bin/pkispawn Christian