The Wayback Machine - https://web.archive.org/web/20210422222400/https://github.com/python/cpython/pull/23014
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014) #23014

Merged
merged 1 commit into from Apr 17, 2021

Conversation

@tiran
Copy link
Member

@tiran tiran commented Oct 28, 2020

  • Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
  • Update hashopenssl to require OpenSSL 1.1.1
  • multissltests only OpenSSL > 1.1.0
  • ALPN is always supported
  • SNI is always supported
  • Remove deprecated NPN code. Python wrappers are no-op.
  • ECDH is always supported
  • Remove OPENSSL_VERSION_1_1 macro
  • Remove locking callbacks
  • Drop PY_OPENSSL_1_1_API macro
  • Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
  • SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
  • security level is always available now
  • get_num_tickets is available with TLS 1.3
  • X509_V_ERR MISMATCH is always available now
  • Always set SSL_MODE_RELEASE_BUFFERS
  • X509_V_FLAG_TRUSTED_FIRST is always available
  • get_ciphers is always supported
  • SSL_CTX_set_keylog_callback is always available
  • Update Modules/Setup with static link example
  • Mention PEP in whatsnew
  • Drop 1.0.2 and 1.1.0 from GHA tests

https://bugs.python.org/issue43669

@github-actions
Copy link

@github-actions github-actions bot commented Dec 16, 2020

This PR is stale because it has been open for 30 days with no activity. Remove stale label or comment or this will be closed in 5 days

@github-actions github-actions bot added the stale label Dec 16, 2020
@tiran tiran force-pushed the tiran:pep-644 branch from 0f41d75 to a323058 Mar 27, 2021
@tiran tiran changed the title PEP 644: Require OpenSSL 1.1.1 or newer bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer Mar 30, 2021
@tiran tiran force-pushed the tiran:pep-644 branch from a309c4f to de6a7c3 Mar 30, 2021
@tiran tiran force-pushed the tiran:pep-644 branch 2 times, most recently from 0704819 to edab5a6 Apr 17, 2021
@tiran tiran marked this pull request as ready for review Apr 17, 2021
- Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
- Update hashopenssl to require OpenSSL 1.1.1
- multissltests only OpenSSL > 1.1.0
- ALPN is always supported
- SNI is always supported
- Remove deprecated NPN code. Python wrappers are no-op.
- ECDH is always supported
- Remove OPENSSL_VERSION_1_1 macro
- Remove locking callbacks
- Drop PY_OPENSSL_1_1_API macro
- Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
- SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
- security level is always available now
- get_num_tickets is available with TLS 1.3
- X509_V_ERR MISMATCH is always available now
- Always set SSL_MODE_RELEASE_BUFFERS
- X509_V_FLAG_TRUSTED_FIRST is always available
- get_ciphers is always supported
- SSL_CTX_set_keylog_callback is always available
- Update Modules/Setup with static link example
- Mention PEP in whatsnew
- Drop 1.0.2 and 1.1.0 from GHA tests
@tiran tiran force-pushed the tiran:pep-644 branch from edab5a6 to 3ddf7fa Apr 17, 2021
@tiran tiran changed the title bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014) Apr 17, 2021
@tiran tiran merged commit 39258d3 into python:master Apr 17, 2021
13 checks passed
13 checks passed
Docs
Details
Check for source changes
Details
Check if generated files are up to date
Details
Windows (x86)
Details
Windows (x64)
Details
macOS
Details
Ubuntu
Details
Ubuntu SSL tests with OpenSSL 1.1.1k
Details
Ubuntu SSL tests with OpenSSL 3.0.0-alpha14
Details
Azure Pipelines PR #20210417.14 succeeded
Details
Travis CI - Pull Request Build Passed
Details
bedevere/issue-number Issue number 43669 found
Details
bedevere/news News entry found in Misc/NEWS.d
@tiran tiran deleted the tiran:pep-644 branch Apr 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants