Support cryptography 3.3 (#882)

* Re-add Debian Bullseye to CI.

* Support cryptography 3.3 as well.

plugins/doc_fragments/acme.py

@@ -18,7 +18,8 @@ notes:
     another ACME server, please L(create an issue,https://github.com/ansible-collections/community.crypto/issues/new/choose)
     to help us supporting it. Feedback that an ACME server not mentioned does work is also appreciated.
 requirements:
-  - either openssl or L(cryptography,https://cryptography.io/) >= 3.4
+  - either C(openssl)
+  - or L(cryptography,https://cryptography.io/) >= 3.3
 options:
   acme_version:
     description:

plugins/doc_fragments/cryptography_dep.py

@@ -0,0 +1,20 @@
+# Copyright (c) 2025 Ansible project
+# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+from __future__ import annotations
+
+
+class ModuleDocFragment:
+    """
+    Doc fragments for cryptography requirements.
+
+    Must be kept in sync with plugins/module_utils/cryptography_dep.py.
+    """
+
+    # Corresponds to the plugins.module_utils.cryptography_dep.COLLECTION_MINIMUM_CRYPTOGRAPHY_VERSION constant
+    MINIMUM = r"""
+requirements:
+  - cryptography >= 3.3
+options: {}
+"""

plugins/doc_fragments/module_certificate.py

@@ -22,7 +22,7 @@ attributes:
       - If relative timestamps are used and O(ignore_timestamps=false), the module is not idempotent.
       - The option O(force=true) generally disables idempotency.
 requirements:
-  - cryptography >= 3.4 (if using V(selfsigned) or V(ownca) provider)
+  - cryptography >= 3.3 (if using V(selfsigned) or V(ownca) provider)
 options:
   force:
     description:

plugins/doc_fragments/module_csr.py

@@ -18,7 +18,7 @@ attributes:
   idempotent:
     support: full
 requirements:
-  - cryptography >= 3.4
+  - cryptography >= 3.3
 options:
   digest:
     description:

plugins/doc_fragments/module_privatekey.py

@@ -22,7 +22,7 @@ attributes:
     details:
       - The option O(regenerate=always) generally disables idempotency.
 requirements:
-  - cryptography >= 3.4
+  - cryptography >= 3.3
 options:
   size:
     description:

plugins/doc_fragments/module_privatekey_convert.py

@@ -10,7 +10,7 @@ class ModuleDocFragment:
     # Standard files documentation fragment
     DOCUMENTATION = r"""
 requirements:
-  - cryptography >= 3.4
+  - cryptography >= 3.3
 attributes:
   diff_mode:
     support: none