This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author vstinner
Recipients vstinner
Date 2019-02-15.16:29:42
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1550248183.17.0.361168114847.issue36005@roundup.psfhosted.org>
In-reply-to
Content
Extract of pythoninfo:

ssl.HAS_SNI: True
ssl.OPENSSL_VERSION: OpenSSL 1.1.1a  20 Nov 2018
ssl.OPENSSL_VERSION_INFO: (1, 1, 1, 1, 15)
ssl.OP_ALL: -0x7fffffac
ssl.OP_NO_TLSv1_1: 0x10000000

https://buildbot.python.org/all/#/builders/92/builds/325

Many tests with TLS errors. A few examples:

ERROR: test_connect (test.test_ssl.NetworkedTests)
...
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

ERROR: test_protocol_sslv23 (test.test_ssl.ThreadedTests)
Connecting to an SSLv23 server with various client options
----------------------------------------------------------------------
...
    self._sslobj.do_handshake()
SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:727)

ERROR: test_networked_good_cert (test.test_httplib.HTTPSTest)
...
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

ERROR: test_context_argument (test.test_urllibnet.urlopen_HttpsTests)
...
IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

--

There are other failures which may be unrelated:

ERROR: test_fileno (test.test_urllib2net.OtherNetworkTests)
...
HTTPError: HTTP Error 404: Not Found



This buildbot build contains 5 changes:

    [2.7] bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976) (GH-8760) (GH-10607)(3 hours ago)
    bpo-35746: Credit Colin Read and Nicolas Edet (GH-11866)(5 hours ago)
    Doc sidebar: 3.6 has moved to security-fix mode. (GH-11810)(5 days ago)
    [2.7] Fix url to core-mentorship mailing list (GH-11775). (GH-11778)(9 days ago)
    bpo-25592: Improve documentation of distutils data_files (GH-9767) (GH-11734)(13 days ago)

I bet that it's a regression caused by:

https://github.com/python/cpython/commit/c49f63c1761ce03df7850b9e0b31a18c432dac64
History
Date User Action Args
2019-02-15 16:29:43vstinnersetrecipients: + vstinner
2019-02-15 16:29:43vstinnersetmessageid: <1550248183.17.0.361168114847.issue36005@roundup.psfhosted.org>
2019-02-15 16:29:43vstinnerlinkissue36005 messages
2019-02-15 16:29:42vstinnercreate