See tracker.
Cinder now uses cryptography instead of pycrypto.
when queens comes out ocata can be removed and this bug can be solved
FWICS current versions aren't affected.