Created on 2019-11-16 15:06 by christian.heimes, last changed 2021-07-12 15:12 by lukasz.langa.
| Pull Requests | |||
|---|---|---|---|
| URL | Status | Linked | Edit |
| PR 17190 | merged | christian.heimes, 2019-11-16 15:11 | |
| PR 17499 | merged | miss-islington, 2019-12-07 16:59 | |
| PR 17500 | merged | miss-islington, 2019-12-07 16:59 | |
| PR 25316 | closed | christian.heimes, 2021-04-09 17:59 | |
| PR 25319 | merged | christian.heimes, 2021-04-09 20:07 | |
| PR 25320 | merged | miss-islington, 2021-04-09 20:23 | |
| PR 25321 | merged | miss-islington, 2021-04-09 20:23 | |
| PR 25537 | merged | christian.heimes, 2021-04-22 20:33 | |
| PR 25624 | merged | christian.heimes, 2021-04-26 07:58 | |
| PR 25626 | merged | miss-islington, 2021-04-26 08:54 | |
| PR 25627 | merged | miss-islington, 2021-04-26 08:54 | |
| PR 25817 | merged | christian.heimes, 2021-05-02 14:00 | |
| PR 25942 | merged | christian.heimes, 2021-05-06 13:14 | |
| PR 25943 | merged | miss-islington, 2021-05-06 14:30 | |
| PR 25944 | merged | christian.heimes, 2021-05-06 14:37 | |
| PR 26266 | merged | christian.heimes, 2021-05-20 14:06 | |
| PR 26269 | merged | miss-islington, 2021-05-20 14:46 | |
| PR 26769 | merged | christian.heimes, 2021-06-17 13:51 | |
| PR 26799 | merged | miss-islington, 2021-06-19 09:08 | |
| Messages (22) | |||
|---|---|---|---|
| msg356750 - (view) | Author: Christian Heimes (christian.heimes) *  |
Date: 2019-11-16 15:06 | |
OpenSSL 3.0.0 is currently development [1]. I'm expecting a first beta release in December. Final release is scheduled for Q2 2020. OpenSSL 3.0.0 is API and feature compatible to OpenSSL 1.1.0 and 1.1.1. Only minor changes are required: * OpenSSL version number is >= 3.0.0, which breaks test_openssl_version * GENERAL_NAME_print() no longer adds trailing newline to IPv6 address strings. * ERR_func_error_string is deprecated [1] https://www.openssl.org/blog/blog/2019/11/07/3.0-update/ |
|||
| msg356759 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2019-11-16 17:22 | |
PR GH-17190 fixes test_openssl_version and removes the trailing newline from IPv6 addresses on all OpenSSL versions. I prefer to have the output consistent on all OpenSSL versions. The newline was silly any way. |
|||
| msg357979 - (view) | Author: miss-islington (miss-islington) | Date: 2019-12-07 16:59 | |
New changeset 2b7de6696bf2f924cd2cd9ff0a539c8aa37c6244 by Miss Islington (bot) (Christian Heimes) in branch 'master': bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190) https://github.com/python/cpython/commit/2b7de6696bf2f924cd2cd9ff0a539c8aa37c6244 |
|||
| msg357980 - (view) | Author: miss-islington (miss-islington) | Date: 2019-12-07 17:20 | |
New changeset 9d3cacd5901f8fbbc4f8b78fc35abad01a0e6546 by Miss Islington (bot) in branch '3.8': [3.8] bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190) (GH-17499) https://github.com/python/cpython/commit/9d3cacd5901f8fbbc4f8b78fc35abad01a0e6546 |
|||
| msg357981 - (view) | Author: miss-islington (miss-islington) | Date: 2019-12-07 17:20 | |
New changeset a197f8aa7493e66bc54c3db8f796d00cef1c3042 by Miss Islington (bot) in branch '3.7': [3.7] bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190) (GH-17500) https://github.com/python/cpython/commit/a197f8aa7493e66bc54c3db8f796d00cef1c3042 |
|||
| msg378790 - (view) | Author: Irit Katriel (iritkatriel) * |
Date: 2020-10-16 23:24 | |
Can this be closed? |
|||
| msg378807 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2020-10-17 11:11 | |
No, this is still work in progress. |
|||
| msg390485 - (view) | Author: Miro Hrončok (hroncok) * | Date: 2021-04-07 21:59 | |
Python 3.10.0a7 with OpenSSL 3.0 from https://copr.fedorainfracloud.org/coprs/saprasad/openssl-3.0/ in https://copr.fedorainfracloud.org/coprs/g/python/openssl-3.0/package/python3.10/ (full logs available there). 3 tests failed: test_imaplib test_ssl test_urllib2_localnet Many: ssl.SSLError: [SSL: KRB5_S_TKT_NYV] unexpected eof while reading (_ssl.c:2628) Also: Traceback (most recent call last): File "/builddir/build/BUILD/Python-3.10.0a7/Lib/test/test_ssl.py", line 1413, in test_load_cert_chain ctx.load_cert_chain(CERTFILE_PROTECTED, password=getpass_huge) SystemError: _PyEval_EvalFrameDefault returned a result with an exception set And: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1122) ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:1122) ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1122) |
|||
| msg390650 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2021-04-09 17:19 | |
Miro, I have pushed several fixes for OpenSSL 3.0.0 * bpo-43788 addresses wrong library and error reason codes (e.g. KRB5_S_TKT_NYV) * bpo-43789 fixes an issue with exception state in password callbacks (_PyEval_EvalFrameDefault returned a result with an exception set) * bpo-43791 disables TLS 1.0 and 1.1 testing with OpenSSL 3.0.0. I'll have to talk to upstream and figure out a better solution. * bpo-43794 adds OP_IGNORE_UNEXPECTED_EOF and sets it by default. This makes the code behave like OpenSSL 1.1.0 and 1.0.2. I'll look into the other issues next week. |
|||
| msg390662 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2021-04-09 20:23 | |
New changeset 2d7fdc90731e132f9d6b43852ee112f25831394b by Christian Heimes in branch 'master': bpo-38820: OpenSSL 3.0.0: Use supported hashing algos in doc test (GH-25319) https://github.com/python/cpython/commit/2d7fdc90731e132f9d6b43852ee112f25831394b |
|||
| msg390664 - (view) | Author: miss-islington (miss-islington) | Date: 2021-04-09 20:33 | |
New changeset ffb05bbb30fa82dbe887981bdabd65af7daffcd1 by Miss Islington (bot) in branch '3.8': bpo-38820: OpenSSL 3.0.0: Use supported hashing algos in doc test (GH-25319) https://github.com/python/cpython/commit/ffb05bbb30fa82dbe887981bdabd65af7daffcd1 |
|||
| msg390666 - (view) | Author: miss-islington (miss-islington) | Date: 2021-04-09 20:46 | |
New changeset 7c8796a750fb108be99e0bc50ca3dba000d77e54 by Miss Islington (bot) in branch '3.9': bpo-38820: OpenSSL 3.0.0: Use supported hashing algos in doc test (GH-25319) https://github.com/python/cpython/commit/7c8796a750fb108be99e0bc50ca3dba000d77e54 |
|||
| msg391688 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2021-04-23 12:19 | |
New changeset dcf658157df11de198a98e3db2a3050dd4f6b973 by Christian Heimes in branch 'master': bpo-38820: Test with OpenSSL 3.0.0-alpha15 (GH-25537) https://github.com/python/cpython/commit/dcf658157df11de198a98e3db2a3050dd4f6b973 |
|||
| msg391887 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2021-04-26 08:54 | |
New changeset 3c586ca500854476e6eff06713236faff233d035 by Christian Heimes in branch 'master': bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624) https://github.com/python/cpython/commit/3c586ca500854476e6eff06713236faff233d035 |
|||
| msg391892 - (view) | Author: miss-islington (miss-islington) | Date: 2021-04-26 09:35 | |
New changeset 10ee2662dfeeb3b00d232f8f1c2eecc4d7e65244 by Miss Islington (bot) in branch '3.8': [3.8] bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624) (GH-25627) https://github.com/python/cpython/commit/10ee2662dfeeb3b00d232f8f1c2eecc4d7e65244 |
|||
| msg391940 - (view) | Author: miss-islington (miss-islington) | Date: 2021-04-26 15:12 | |
New changeset 3b917d177452dcacf41605254fc299d051fbf75a by Miss Islington (bot) in branch '3.9': [3.9] bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624) (GH-25626) https://github.com/python/cpython/commit/3b917d177452dcacf41605254fc299d051fbf75a |
|||
| msg392701 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2021-05-02 14:38 | |
New changeset d8389e3e50864447a74605d7ede3d14246bc633a by Christian Heimes in branch 'master': bpo-38820: Add ssl, hashlib, and hmac changes to whatsnew 3.10 (GH-25817) https://github.com/python/cpython/commit/d8389e3e50864447a74605d7ede3d14246bc633a |
|||
| msg393098 - (view) | Author: miss-islington (miss-islington) | Date: 2021-05-06 14:53 | |
New changeset f8778f96e8b2864093bc8b283598e82c0dd00133 by Miss Islington (bot) in branch '3.10': bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942) https://github.com/python/cpython/commit/f8778f96e8b2864093bc8b283598e82c0dd00133 |
|||
| msg394031 - (view) | Author: miss-islington (miss-islington) | Date: 2021-05-20 15:11 | |
New changeset 36843f716df7cfa67ea7cd858acb0df1fc5e980e by Miss Islington (bot) in branch '3.10': bpo-38820: Test with OpenSSL 3.0.0-alpha17 (GH-26266) https://github.com/python/cpython/commit/36843f716df7cfa67ea7cd858acb0df1fc5e980e |
|||
| msg396120 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2021-06-19 09:08 | |
New changeset 44fb55149934d8fb095edb6fc3f8167208035b96 by Christian Heimes in branch 'main': bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769) https://github.com/python/cpython/commit/44fb55149934d8fb095edb6fc3f8167208035b96 |
|||
| msg396123 - (view) | Author: miss-islington (miss-islington) | Date: 2021-06-19 10:45 | |
New changeset c6cd2ecdb64d16f640ff255e5a267b95974a8041 by Miss Islington (bot) in branch '3.10': [3.10] bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769) (GH-26799) https://github.com/python/cpython/commit/c6cd2ecdb64d16f640ff255e5a267b95974a8041 |
|||
| msg397326 - (view) | Author: Łukasz Langa (lukasz.langa) * |
Date: 2021-07-12 15:12 | |
New changeset c92b391dcefe9a7b3e6290bc2e2356eedfcf4bc3 by Christian Heimes in branch '3.9': [3.9] bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942) (#25944) https://github.com/python/cpython/commit/c92b391dcefe9a7b3e6290bc2e2356eedfcf4bc3 |
|||
| History | |||
|---|---|---|---|
| Date | User | Action | Args |
| 2021-07-12 15:12:42 | lukasz.langa | set | nosy:
+ lukasz.langa messages: + msg397326 |
| 2021-06-19 10:45:09 | miss-islington | set | messages: + msg396123 |
| 2021-06-19 09:08:50 | miss-islington | set | pull_requests: + pull_request25380 |
| 2021-06-19 09:08:48 | christian.heimes | set | messages: + msg396120 |
| 2021-06-17 13:51:33 | christian.heimes | set | pull_requests: + pull_request25356 |
| 2021-06-02 21:31:16 | bweeks | set | nosy:
+ bweeks |
| 2021-05-20 15:11:02 | miss-islington | set | messages: + msg394031 |
| 2021-05-20 14:46:46 | miss-islington | set | pull_requests: + pull_request24873 |
| 2021-05-20 14:06:56 | christian.heimes | set | pull_requests: + pull_request24870 |
| 2021-05-06 14:53:19 | miss-islington | set | messages: + msg393098 |
| 2021-05-06 14:37:49 | christian.heimes | set | pull_requests: + pull_request24609 |
| 2021-05-06 14:30:21 | miss-islington | set | pull_requests: + pull_request24608 |
| 2021-05-06 13:14:34 | christian.heimes | set | pull_requests: + pull_request24607 |
| 2021-05-02 14:38:22 | christian.heimes | set | messages: + msg392701 |
| 2021-05-02 14:00:32 | christian.heimes | set | pull_requests: + pull_request24503 |
| 2021-04-26 15:12:46 | miss-islington | set | messages: + msg391940 |
| 2021-04-26 09:35:39 | miss-islington | set | messages: + msg391892 |
| 2021-04-26 08:54:29 | miss-islington | set | pull_requests: + pull_request24326 |
| 2021-04-26 08:54:23 | miss-islington | set | pull_requests: + pull_request24325 |
| 2021-04-26 08:54:20 | christian.heimes | set | messages: + msg391887 |
| 2021-04-26 07:58:18 | christian.heimes | set | pull_requests: + pull_request24323 |
| 2021-04-23 12:19:24 | christian.heimes | set | messages: + msg391688 |
| 2021-04-23 11:44:32 | christian.heimes | set | dependencies: + OpenSSL 3.0.0: handle empty cadata consistently |
| 2021-04-22 20:33:09 | christian.heimes | set | pull_requests: + pull_request24256 |
| 2021-04-13 07:08:55 | christian.heimes | set | dependencies: + OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1, Run GHA CI with multiple OpenSSL versions |
| 2021-04-09 20:46:25 | miss-islington | set | messages: + msg390666 |
| 2021-04-09 20:33:36 | miss-islington | set | messages: + msg390664 |
| 2021-04-09 20:23:51 | miss-islington | set | pull_requests: + pull_request24056 |
| 2021-04-09 20:23:40 | miss-islington | set | pull_requests: + pull_request24055 |
| 2021-04-09 20:23:19 | christian.heimes | set | messages: + msg390662 |
| 2021-04-09 20:07:23 | christian.heimes | set | pull_requests: + pull_request24054 |
| 2021-04-09 17:59:38 | christian.heimes | set | stage: patch review pull_requests: + pull_request24051 |
| 2021-04-09 17:19:52 | christian.heimes | set | messages: + msg390650 |
| 2021-04-09 15:19:17 | christian.heimes | set | dependencies: + OpenSSL 3.0.0: Make ssl_data.h version specific, OpenSSL 3.0.0: Handle UNEXPECTED_EOF_WHILE_READING / wrap SSL_OP_IGNORE_UNEXPECTED_EOF |
| 2021-04-09 13:28:23 | christian.heimes | set | dependencies:
+ OpenSSL 3.0.0: password callback called multiple times, OpenSSL 3.0.0: TLS 1.0 / 1.1 connections fail with TLSV1_ALERT_INTERNAL_ERROR versions: - Python 3.7 |
| 2021-04-08 00:45:51 | yan12125 | set | nosy:
- yan12125 |
| 2021-04-07 23:57:35 | cstratak | set | nosy:
+ cstratak |
| 2021-04-07 21:59:10 | hroncok | set | nosy:
+ hroncok messages: + msg390485 versions: + Python 3.10 |
| 2020-12-15 17:05:33 | yan12125 | set | nosy:
+ yan12125 |
| 2020-10-17 11:11:01 | christian.heimes | set | status: closed -> open resolution: fixed -> messages: + msg378807 stage: resolved -> (no value) |
| 2020-10-17 01:29:10 | methane | set | status: open -> closed resolution: fixed stage: patch review -> resolved |
| 2020-10-16 23:24:10 | iritkatriel | set | nosy:
+ iritkatriel messages: + msg378790 |
| 2019-12-07 17:20:46 | miss-islington | set | messages: + msg357981 |
| 2019-12-07 17:20:31 | miss-islington | set | messages: + msg357980 |
| 2019-12-07 16:59:55 | miss-islington | set | pull_requests: + pull_request16978 |
| 2019-12-07 16:59:49 | miss-islington | set | pull_requests: + pull_request16977 |
| 2019-12-07 16:59:40 | miss-islington | set | nosy:
+ miss-islington messages: + msg357979 |
| 2019-11-16 17:22:08 | christian.heimes | set | messages: + msg356759 |
| 2019-11-16 15:11:57 | christian.heimes | set | keywords:
+ patch stage: patch review pull_requests: + pull_request16695 |
| 2019-11-16 15:06:59 | christian.heimes | create | |