Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade installers to OpenSSL 1.1.0g and 1.0.2n #75573

Closed
zooba opened this issue Sep 8, 2017 · 12 comments
Closed

Upgrade installers to OpenSSL 1.1.0g and 1.0.2n #75573

zooba opened this issue Sep 8, 2017 · 12 comments
Labels
3.7 (EOL) end of life OS-mac OS-windows topic-SSL type-feature A feature request or enhancement

Comments

@zooba
Copy link
Member

zooba commented Sep 8, 2017

BPO 31392
Nosy @pfmoore, @ronaldoussoren, @vstinner, @tiran, @tjguk, @ned-deily, @zware, @zooba
PRs
  • bpo-31392: Update SSL build for 1.1.0 #3448
  • [3.6] bpo-31400: Improve SSL error handling on Windows (GH-3463) #3466
  • bpo-31392: Update macOS installer to use OpenSSL 1.0.2m #4715
  • [3.6] bpo-31392: Update macOS installer to use OpenSSL 1.0.2m (GH-4715) #4716
    		•

    Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
closed_at = <Date 2018-09-14.18:45:58.413>
created_at = <Date 2017-09-08.02:52:49.065>
labels = ['OS-mac', 'expert-SSL', 'type-feature', '3.7', 'OS-windows']
title = 'Upgrade installers to OpenSSL 1.1.0g and 1.0.2n'
updated_at = <Date 2018-09-14.18:45:58.412>
user = 'https://github.com/zooba'

    bugs.python.org fields:

    activity = <Date 2018-09-14.18:45:58.412>
actor = 'ned.deily'
assignee = 'none'
closed = True
closed_date = <Date 2018-09-14.18:45:58.413>
closer = 'ned.deily'
components = ['macOS', 'Windows', 'SSL']
creation = <Date 2017-09-08.02:52:49.065>
creator = 'steve.dower'
dependencies = []
files = []
hgrepos = []
issue_num = 31392
keywords = ['patch']
message_count = 12.0
messages = ['301673', '301744', '301770', '301776', '302160', '302161', '307519', '307627', '307633', '307635', '307917', '325383']
nosy_count = 8.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'vstinner', 'christian.heimes', 'tim.golden', 'ned.deily', 'zach.ware', 'steve.dower']
pr_nums = ['3448', '3466', '4715', '4716']
priority = 'normal'
resolution = 'out of date'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'enhancement'
url = 'https://bugs.python.org/issue31392'
versions = ['Python 3.6', 'Python 3.7']
    @zooba
    Copy link
    Member Author

    zooba commented Sep 8, 2017

    As per usual

    @zooba zooba added 3.7 (EOL) end of life OS-mac OS-windows topic-SSL type-feature A feature request or enhancement labels Sep 8, 2017
    @tiran
    Copy link
    Member

    tiran commented Sep 8, 2017

    New changeset e6eb48c by Christian Heimes (Steve Dower) in branch 'master':
    bpo-31400: Improve SSL error handling on Windows (bpo-3463)
    e6eb48c

    @zooba
    Copy link
    Member Author

    zooba commented Sep 9, 2017

    New changeset b84bcc4 by Steve Dower in branch 'master':
    bpo-31392: Update SSL build for 1.1.0 (bpo-3448)
    b84bcc4

    @tiran
    Copy link
    Member

    tiran commented Sep 9, 2017

    New changeset 16f16db by Christian Heimes in branch '3.6':
    [3.6] bpo-31400: Improve SSL error handling on Windows (GH-3463) (bpo-3466)
    16f16db

    @tiran
    Copy link
    Member

    tiran commented Sep 14, 2017

    Ned, can you take care of macOS? Victor noted that master still builds with 1.0.2k.

    @tiran tiran assigned ned-deily and unassigned tiran Sep 14, 2017
    @vstinner
    Copy link
    Member

    FYI I wrote a script to get the version of all library copies embedded in CPython:
    https://github.com/haypo/misc/blob/master/cpython/external_versions.py

    This is how I noticed the OpenSSL version inconsistency.

    @ned-deily
    Copy link
    Member

    1.1.0g and 1.0.2m are out as of 2017-11-02 so both Windows and Mac installer builds for 3.7 and 3.6 should be updated. (I'll take care of the Mac ones.)

    @ned-deily ned-deily changed the title Upgrade installers to OpenSSL 1.1.0f Upgrade installers to OpenSSL 1.1.0g and 1.0.2m Dec 3, 2017
    @ned-deily ned-deily removed their assignment Dec 3, 2017
    @ned-deily
    Copy link
    Member

    New changeset 24e0469 by Ned Deily in branch 'master':
    bpo-31392: Update macOS installer to use OpenSSL 1.0.2m (bpo-4715)
    24e0469

    @ned-deily
    Copy link
    Member

    New changeset 0bec5e1 by Ned Deily (Miss Islington (bot)) in branch '3.6':
    [3.6] bpo-31392: Update macOS installer to use OpenSSL 1.0.2m (GH-4715) (bpo-4716)
    0bec5e1

    @ned-deily
    Copy link
    Member

    Updated the 3.7.0a3 and 3.6.4 macOS installer builds to 1.0.2m; I'll get 3.7.x to 1.1.0 before 3.7.0a4.

    @ned-deily
    Copy link
    Member

    And now 1.0.2n is out. I'm not sure how vulnerable Python is to the main problem fixed (see https://www.openssl.org/news/secadv/20171207.txt) which only impacts 1.0.2.x but I'd be willing to pull it into 3.6.4 final for the Windows and macOS installers.

    @ned-deily ned-deily changed the title Upgrade installers to OpenSSL 1.1.0g and 1.0.2m Upgrade installers to OpenSSL 1.1.0g and 1.0.2n Dec 9, 2017
    @ned-deily
    Copy link
    Member

    Sorry, this should have been closed a while back. We're now on to 1.0.2p for 3.6.7 and 1.1.0i for 3.7.1.

    @ezio-melotti ezio-melotti transferred this issue from another repository Apr 10, 2022
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Assignees
    No one assigned
    Labels
    3.7 (EOL) end of life OS-mac OS-windows topic-SSL type-feature A feature request or enhancement
    Projects
    None yet
    Milestone
    No milestone
    Development

    No branches or pull requests
    4 participants
    @vstinner @tiran @zooba @ned-deily