This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author vstinner
Recipients benjamin.peterson, christian.heimes, cstratak, gregory.p.smith, ned.deily, pablogsal, vstinner
Date 2019-02-21.12:09:22
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1550750962.46.0.641169345696.issue35925@roundup.psfhosted.org>
In-reply-to
Content
After my change:

commit 3ef6344ee53f59ee86831ec36ed2c6f93a56229d
Author: Victor Stinner <vstinner@redhat.com>
Date:   Tue Feb 19 18:06:03 2019 +0100

    bpo-36037: Fix test_ssl for strict OpenSSL policy (GH-11940)

Two tests are still failing on the Debian buildbot worker:

ERROR: test_networked_good_cert (test.test_httplib.HTTPSTest)
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: EE certificate key too weak (_ssl.c:1055)

ERROR: setUpClass (test.test_nntplib.NetworkedNNTP_SSLTests)
ssl.SSLError: [SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:1055)

We should use different servers or contact admins of these servers to update their TLS configuration and/or certificate.
History
Date User Action Args
2019-02-21 12:09:22vstinnersetrecipients: + vstinner, gregory.p.smith, christian.heimes, benjamin.peterson, ned.deily, cstratak, pablogsal
2019-02-21 12:09:22vstinnersetmessageid: <1550750962.46.0.641169345696.issue35925@roundup.psfhosted.org>
2019-02-21 12:09:22vstinnerlinkissue35925 messages
2019-02-21 12:09:22vstinnercreate