This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author vstinner
Recipients benjamin.peterson, christian.heimes, cstratak, gregory.p.smith, ned.deily, pablogsal, vstinner
Date 2019-02-21.12:09:22
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <>
After my change:

commit 3ef6344ee53f59ee86831ec36ed2c6f93a56229d
Author: Victor Stinner <>
Date:   Tue Feb 19 18:06:03 2019 +0100

    bpo-36037: Fix test_ssl for strict OpenSSL policy (GH-11940)

Two tests are still failing on the Debian buildbot worker:

ERROR: test_networked_good_cert (test.test_httplib.HTTPSTest)
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: EE certificate key too weak (_ssl.c:1055)

ERROR: setUpClass (test.test_nntplib.NetworkedNNTP_SSLTests)
ssl.SSLError: [SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:1055)

We should use different servers or contact admins of these servers to update their TLS configuration and/or certificate.
Date User Action Args
2019-02-21 12:09:22vstinnersetrecipients: + vstinner, gregory.p.smith, christian.heimes, benjamin.peterson, ned.deily, cstratak, pablogsal
2019-02-21 12:09:22vstinnersetmessageid: <>
2019-02-21 12:09:22vstinnerlinkissue35925 messages
2019-02-21 12:09:22vstinnercreate