Movatterモバイル変換

[0]ホーム
URL:

homepage

Issue38820
➜

This issue trackerhas been migrated toGitHub, and is currentlyread-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title:Make Python compatible with OpenSSL 3.0.0
Type:enhancementStage:patch review
Components:SSLVersions:Python 3.11, Python 3.10, Python 3.9
process
Status:openResolution:
Dependencies:43788437894379143794437994381143920Superseder:
Assigned To: christian.heimesNosy List: bweeks, christian.heimes, cstratak, hroncok, iritkatriel, lukasz.langa, mcepl, miss-islington
Priority:highKeywords:patch

Created on2019-11-16 15:06 bychristian.heimes, last changed2022-04-11 14:59 byadmin.

Pull Requests
URLStatusLinkedEdit
PR 17190mergedchristian.heimes,2019-11-16 15:11
PR 17499mergedmiss-islington,2019-12-07 16:59
PR 17500mergedmiss-islington,2019-12-07 16:59
PR 25316closedchristian.heimes,2021-04-09 17:59
PR 25319mergedchristian.heimes,2021-04-09 20:07
PR 25320mergedmiss-islington,2021-04-09 20:23
PR 25321mergedmiss-islington,2021-04-09 20:23
PR 25537mergedchristian.heimes,2021-04-22 20:33
PR 25624mergedchristian.heimes,2021-04-26 07:58
PR 25626mergedmiss-islington,2021-04-26 08:54
PR 25627mergedmiss-islington,2021-04-26 08:54
PR 25817mergedchristian.heimes,2021-05-02 14:00
PR 25942mergedchristian.heimes,2021-05-06 13:14
PR 25943mergedmiss-islington,2021-05-06 14:30
PR 25944mergedchristian.heimes,2021-05-06 14:37
PR 26266mergedchristian.heimes,2021-05-20 14:06
PR 26269mergedmiss-islington,2021-05-20 14:46
PR 26769mergedchristian.heimes,2021-06-17 13:51
PR 26799mergedmiss-islington,2021-06-19 09:08
PR 28205mergedchristian.heimes,2021-09-07 13:32
PR 28216mergedmiss-islington,2021-09-07 17:05
PR 28217mergedlukasz.langa,2021-09-07 17:09
Messages (27)
msg356750 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2019-11-16 15:06
OpenSSL 3.0.0 is currently development [1]. I'm expecting a first beta release in December. Final release is scheduled for Q2 2020. OpenSSL 3.0.0 is API and feature compatible to OpenSSL 1.1.0 and 1.1.1. Only minor changes are required:* OpenSSL version number is >= 3.0.0, which breaks test_openssl_version* GENERAL_NAME_print() no longer adds trailing newline to IPv6 address strings. * ERR_func_error_string is deprecated[1]https://www.openssl.org/blog/blog/2019/11/07/3.0-update/
msg356759 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2019-11-16 17:22
PRGH-17190 fixes test_openssl_version and removes the trailing newline from IPv6 addresses on all OpenSSL versions. I prefer to have the output consistent on all OpenSSL versions. The newline was silly any way.
msg357979 -(view)Author: miss-islington (miss-islington)Date: 2019-12-07 16:59
New changeset2b7de6696bf2f924cd2cd9ff0a539c8aa37c6244 by Miss Islington (bot) (Christian Heimes) in branch 'master':bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190)https://github.com/python/cpython/commit/2b7de6696bf2f924cd2cd9ff0a539c8aa37c6244
msg357980 -(view)Author: miss-islington (miss-islington)Date: 2019-12-07 17:20
New changeset9d3cacd5901f8fbbc4f8b78fc35abad01a0e6546 by Miss Islington (bot) in branch '3.8':[3.8]bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190) (GH-17499)https://github.com/python/cpython/commit/9d3cacd5901f8fbbc4f8b78fc35abad01a0e6546
msg357981 -(view)Author: miss-islington (miss-islington)Date: 2019-12-07 17:20
New changeseta197f8aa7493e66bc54c3db8f796d00cef1c3042 by Miss Islington (bot) in branch '3.7':[3.7]bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190) (GH-17500)https://github.com/python/cpython/commit/a197f8aa7493e66bc54c3db8f796d00cef1c3042
msg378790 -(view)Author: Irit Katriel (iritkatriel)*(Python committer)Date: 2020-10-16 23:24
Can this be closed?
msg378807 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2020-10-17 11:11
No, this is still work in progress.
msg390485 -(view)Author: Miro Hrončok (hroncok)*Date: 2021-04-07 21:59
Python 3.10.0a7 with OpenSSL 3.0 fromhttps://copr.fedorainfracloud.org/coprs/saprasad/openssl-3.0/ inhttps://copr.fedorainfracloud.org/coprs/g/python/openssl-3.0/package/python3.10/ (full logs available there).3 tests failed:    test_imaplib test_ssl test_urllib2_localnetMany:ssl.SSLError: [SSL: KRB5_S_TKT_NYV] unexpected eof while reading (_ssl.c:2628)Also:Traceback (most recent call last):  File "/builddir/build/BUILD/Python-3.10.0a7/Lib/test/test_ssl.py", line 1413, in test_load_cert_chain    ctx.load_cert_chain(CERTFILE_PROTECTED, password=getpass_huge)SystemError: _PyEval_EvalFrameDefault returned a result with an exception setAnd: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1122) ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:1122) ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1122)
msg390650 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2021-04-09 17:19
Miro,I have pushed several fixes for OpenSSL 3.0.0*bpo-43788 addresses wrong library and error reason codes (e.g. KRB5_S_TKT_NYV)*bpo-43789 fixes an issue with exception state in password callbacks (_PyEval_EvalFrameDefault returned a result with an exception set)*bpo-43791 disables TLS 1.0 and 1.1 testing with OpenSSL 3.0.0. I'll have to talk to upstream and figure out a better solution.*bpo-43794 adds OP_IGNORE_UNEXPECTED_EOF and sets it by default. This makes the code behave like OpenSSL 1.1.0 and 1.0.2.I'll look into the other issues next week.
msg390662 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2021-04-09 20:23
New changeset2d7fdc90731e132f9d6b43852ee112f25831394b by Christian Heimes in branch 'master':bpo-38820: OpenSSL 3.0.0: Use supported hashing algos in doc test (GH-25319)https://github.com/python/cpython/commit/2d7fdc90731e132f9d6b43852ee112f25831394b
msg390664 -(view)Author: miss-islington (miss-islington)Date: 2021-04-09 20:33
New changesetffb05bbb30fa82dbe887981bdabd65af7daffcd1 by Miss Islington (bot) in branch '3.8':bpo-38820: OpenSSL 3.0.0: Use supported hashing algos in doc test (GH-25319)https://github.com/python/cpython/commit/ffb05bbb30fa82dbe887981bdabd65af7daffcd1
msg390666 -(view)Author: miss-islington (miss-islington)Date: 2021-04-09 20:46
New changeset7c8796a750fb108be99e0bc50ca3dba000d77e54 by Miss Islington (bot) in branch '3.9':bpo-38820: OpenSSL 3.0.0: Use supported hashing algos in doc test (GH-25319)https://github.com/python/cpython/commit/7c8796a750fb108be99e0bc50ca3dba000d77e54
msg391688 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2021-04-23 12:19
New changesetdcf658157df11de198a98e3db2a3050dd4f6b973 by Christian Heimes in branch 'master':bpo-38820: Test with OpenSSL 3.0.0-alpha15 (GH-25537)https://github.com/python/cpython/commit/dcf658157df11de198a98e3db2a3050dd4f6b973
msg391887 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2021-04-26 08:54
New changeset3c586ca500854476e6eff06713236faff233d035 by Christian Heimes in branch 'master':bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624)https://github.com/python/cpython/commit/3c586ca500854476e6eff06713236faff233d035
msg391892 -(view)Author: miss-islington (miss-islington)Date: 2021-04-26 09:35
New changeset10ee2662dfeeb3b00d232f8f1c2eecc4d7e65244 by Miss Islington (bot) in branch '3.8':[3.8]bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624) (GH-25627)https://github.com/python/cpython/commit/10ee2662dfeeb3b00d232f8f1c2eecc4d7e65244
msg391940 -(view)Author: miss-islington (miss-islington)Date: 2021-04-26 15:12
New changeset3b917d177452dcacf41605254fc299d051fbf75a by Miss Islington (bot) in branch '3.9':[3.9]bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624) (GH-25626)https://github.com/python/cpython/commit/3b917d177452dcacf41605254fc299d051fbf75a
msg392701 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2021-05-02 14:38
New changesetd8389e3e50864447a74605d7ede3d14246bc633a by Christian Heimes in branch 'master':bpo-38820: Add ssl, hashlib, and hmac changes to whatsnew 3.10 (GH-25817)https://github.com/python/cpython/commit/d8389e3e50864447a74605d7ede3d14246bc633a
msg393098 -(view)Author: miss-islington (miss-islington)Date: 2021-05-06 14:53
New changesetf8778f96e8b2864093bc8b283598e82c0dd00133 by Miss Islington (bot) in branch '3.10':bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942)https://github.com/python/cpython/commit/f8778f96e8b2864093bc8b283598e82c0dd00133
msg394031 -(view)Author: miss-islington (miss-islington)Date: 2021-05-20 15:11
New changeset36843f716df7cfa67ea7cd858acb0df1fc5e980e by Miss Islington (bot) in branch '3.10':bpo-38820: Test with OpenSSL 3.0.0-alpha17 (GH-26266)https://github.com/python/cpython/commit/36843f716df7cfa67ea7cd858acb0df1fc5e980e
msg396120 -(view)Author: Christian Heimes (christian.heimes)*(Python committer)Date: 2021-06-19 09:08
New changeset44fb55149934d8fb095edb6fc3f8167208035b96 by Christian Heimes in branch 'main':bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769)https://github.com/python/cpython/commit/44fb55149934d8fb095edb6fc3f8167208035b96
msg396123 -(view)Author: miss-islington (miss-islington)Date: 2021-06-19 10:45
New changesetc6cd2ecdb64d16f640ff255e5a267b95974a8041 by Miss Islington (bot) in branch '3.10':[3.10]bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769) (GH-26799)https://github.com/python/cpython/commit/c6cd2ecdb64d16f640ff255e5a267b95974a8041
msg397326 -(view)Author: Łukasz Langa (lukasz.langa)*(Python committer)Date: 2021-07-12 15:12
New changesetc92b391dcefe9a7b3e6290bc2e2356eedfcf4bc3 by Christian Heimes in branch '3.9':[3.9]bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942) (#25944)https://github.com/python/cpython/commit/c92b391dcefe9a7b3e6290bc2e2356eedfcf4bc3
msg401311 -(view)Author: Łukasz Langa (lukasz.langa)*(Python committer)Date: 2021-09-07 17:05
New changesetcc7c6801945c6a7373553b78bd899ce09681ec0a by Christian Heimes in branch 'main':bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205)https://github.com/python/cpython/commit/cc7c6801945c6a7373553b78bd899ce09681ec0a
msg401355 -(view)Author: miss-islington (miss-islington)Date: 2021-09-08 08:26
New changeset2fe15dbaad651707fb198c3477b7db77ab89ade0 by Miss Islington (bot) in branch '3.10':bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205)https://github.com/python/cpython/commit/2fe15dbaad651707fb198c3477b7db77ab89ade0
msg401407 -(view)Author: Łukasz Langa (lukasz.langa)*(Python committer)Date: 2021-09-08 17:01
New changeset7a6178a7cd8514911e9480f826838dc789fb8655 by Łukasz Langa in branch '3.9':[3.9]bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205) (GH-28217)https://github.com/python/cpython/commit/7a6178a7cd8514911e9480f826838dc789fb8655
msg401408 -(view)Author: Łukasz Langa (lukasz.langa)*(Python committer)Date: 2021-09-08 17:03
Christian, Python is now tested with 3.0.0 final in 3.9, 3.10, and 3.11. Looks like we can close this!Thank you for this big body of work ✨ 🍰 ✨
msg401409 -(view)Author: Łukasz Langa (lukasz.langa)*(Python committer)Date: 2021-09-08 17:05
(I'll let you close this yourself when you determine that the two remaining open dependencies can be closed as well.)
History
DateUserActionArgs
2022-04-11 14:59:23adminsetgithub: 83001
2021-09-08 17:05:14lukasz.langasetmessages: +msg401409
2021-09-08 17:03:22lukasz.langasetmessages: +msg401408
versions: + Python 3.11, - Python 3.8
2021-09-08 17:01:38lukasz.langasetmessages: +msg401407
2021-09-08 08:26:14miss-islingtonsetmessages: +msg401355
2021-09-07 17:09:31lukasz.langasetpull_requests: +pull_request26642
2021-09-07 17:05:04miss-islingtonsetpull_requests: +pull_request26641
2021-09-07 17:05:03lukasz.langasetmessages: +msg401311
2021-09-07 13:32:58christian.heimessetpull_requests: +pull_request26629
2021-08-13 21:11:02mceplsetnosy: +mcepl
2021-07-12 15:12:42lukasz.langasetnosy: +lukasz.langa
messages: +msg397326
2021-06-19 10:45:09miss-islingtonsetmessages: +msg396123
2021-06-19 09:08:50miss-islingtonsetpull_requests: +pull_request25380
2021-06-19 09:08:48christian.heimessetmessages: +msg396120
2021-06-17 13:51:33christian.heimessetpull_requests: +pull_request25356
2021-06-02 21:31:16bweekssetnosy: +bweeks
2021-05-20 15:11:02miss-islingtonsetmessages: +msg394031
2021-05-20 14:46:46miss-islingtonsetpull_requests: +pull_request24873
2021-05-20 14:06:56christian.heimessetpull_requests: +pull_request24870
2021-05-06 14:53:19miss-islingtonsetmessages: +msg393098
2021-05-06 14:37:49christian.heimessetpull_requests: +pull_request24609
2021-05-06 14:30:21miss-islingtonsetpull_requests: +pull_request24608
2021-05-06 13:14:34christian.heimessetpull_requests: +pull_request24607
2021-05-02 14:38:22christian.heimessetmessages: +msg392701
2021-05-02 14:00:32christian.heimessetpull_requests: +pull_request24503
2021-04-26 15:12:46miss-islingtonsetmessages: +msg391940
2021-04-26 09:35:39miss-islingtonsetmessages: +msg391892
2021-04-26 08:54:29miss-islingtonsetpull_requests: +pull_request24326
2021-04-26 08:54:23miss-islingtonsetpull_requests: +pull_request24325
2021-04-26 08:54:20christian.heimessetmessages: +msg391887
2021-04-26 07:58:18christian.heimessetpull_requests: +pull_request24323
2021-04-23 12:19:24christian.heimessetmessages: +msg391688
2021-04-23 11:44:32christian.heimessetdependencies: +OpenSSL 3.0.0: handle empty cadata consistently
2021-04-22 20:33:09christian.heimessetpull_requests: +pull_request24256
2021-04-13 07:08:55christian.heimessetdependencies: +OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1,Run GHA CI with multiple OpenSSL versions
2021-04-09 20:46:25miss-islingtonsetmessages: +msg390666
2021-04-09 20:33:36miss-islingtonsetmessages: +msg390664
2021-04-09 20:23:51miss-islingtonsetpull_requests: +pull_request24056
2021-04-09 20:23:40miss-islingtonsetpull_requests: +pull_request24055
2021-04-09 20:23:19christian.heimessetmessages: +msg390662
2021-04-09 20:07:23christian.heimessetpull_requests: +pull_request24054
2021-04-09 17:59:38christian.heimessetstage: patch review
pull_requests: +pull_request24051
2021-04-09 17:19:52christian.heimessetmessages: +msg390650
2021-04-09 15:19:17christian.heimessetdependencies: +OpenSSL 3.0.0: Make ssl_data.h version specific,OpenSSL 3.0.0: Handle UNEXPECTED_EOF_WHILE_READING / wrap SSL_OP_IGNORE_UNEXPECTED_EOF
2021-04-09 13:28:23christian.heimessetdependencies: +OpenSSL 3.0.0: password callback called multiple times,OpenSSL 3.0.0: TLS 1.0 / 1.1 connections fail with TLSV1_ALERT_INTERNAL_ERROR
versions: - Python 3.7
2021-04-08 00:45:51yan12125setnosy: -yan12125
2021-04-07 23:57:35cstrataksetnosy: +cstratak
2021-04-07 21:59:10hroncoksetnosy: +hroncok

messages: +msg390485
versions: + Python 3.10
2020-12-15 17:05:33yan12125setnosy: +yan12125
2020-10-17 11:11:01christian.heimessetstatus: closed -> open
resolution: fixed ->
messages: +msg378807

stage: resolved -> (no value)
2020-10-17 01:29:10methanesetstatus: open -> closed
resolution: fixed
stage: patch review -> resolved
2020-10-16 23:24:10iritkatrielsetnosy: +iritkatriel
messages: +msg378790
2019-12-07 17:20:46miss-islingtonsetmessages: +msg357981
2019-12-07 17:20:31miss-islingtonsetmessages: +msg357980
2019-12-07 16:59:55miss-islingtonsetpull_requests: +pull_request16978
2019-12-07 16:59:49miss-islingtonsetpull_requests: +pull_request16977
2019-12-07 16:59:40miss-islingtonsetnosy: +miss-islington
messages: +msg357979
2019-11-16 17:22:08christian.heimessetmessages: +msg356759
2019-11-16 15:11:57christian.heimessetkeywords: +patch
stage: patch review
pull_requests: +pull_request16695
2019-11-16 15:06:59christian.heimescreate
Supported byThe Python Software Foundation,
Powered byRoundup
Copyright © 1990-2022,Python Software Foundation
Legal Statements
[8]ページ先頭
©2009-2026 Movatter.jp