[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Christian Heimes]

Christian Heimes  added the comment:

Python 3.7+ uses 
https://www.gnu.org/software/autoconf-archive/ax_check_openssl.html to detect 
OpenSSL. It provides --with-openssl=DIR or can utilize pkg-config.

I'm closing this feature issue as duplicate of #32598.

--
resolution:  -> duplicate
stage: needs patch -> resolved
status: open -> closed
superseder:  -> Use autoconf to detect OpenSSL and libssl features

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Christian Heimes]

Changes by Christian Heimes :


--
assignee:  -> christian.heimes
components: +SSL

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Gregory P. Smith]

Gregory P. Smith added the comment:

machyniak: Your patch appears to be missing the diff to configure.ac.

--
stage: patch review -> needs patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Christian Heimes]

Changes by Christian Heimes :


--
nosy: +christian.heimes
stage:  -> patch review

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Gregory P. Smith]

Gregory P. Smith added the comment:

We use Modules/Setup.local to build the _ssl and _hashlib modules against our 
an SSL library of our choosing at work using a Setup entry like this:

_ssl _ssl.c $(PY_CORE_CFLAGS) -DUSE_SSL -I%{SSL_ROOT}/include \
-Wl,--version-script,_ssl.lds \
-Wl,-Bsymbolic \
%{SSL_ROOT}/libssl.a %{SSL_ROOT}/libcrypto.a

%{SSL_ROOT} is replaced prior to building using sed to drop in the path to our 
desired libssl build.

_ssl.lds is a linker script to hide all but the module init function as we are 
linking statically.

MODULE__ssl {
  global: PyInit__ssl;
  local: *;
};


(all that said, I still see how a configure flag would be nicer for many people 
even though the existing patch does not look like it would work for our own 
static linking needs - one reason we do that being to avoid dynamic versioning 
issues)

--
nosy: +gregory.p.smith

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Gregory P. Smith]

Changes by Gregory P. Smith :


--
versions: +Python 3.6 -Python 3.4

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Berker Peksag]

Changes by Berker Peksag :


--
nosy: +berker.peksag

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Ronald Oussoren]

Ronald Oussoren added the comment:

Isn't Modules/Setup used for builtin modules?

The proposed configure flags are easier to find because similar flags are used 
by other projects using autoconf. 

Note that on OSX you could use CFLAGS=-I/path/to/ssl/include 
LDFLAGS=-L/path/to/ssl/lib, because setup.py contains code to add directories 
from those flags to its search path for headers and libraries, but only for OSX 
because I was overly cautious when adding that code.

--
nosy: +ronaldoussoren

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue21541
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Ned Deily]

Ned Deily added the comment:

Isn't Modules/Setup used for builtin modules?

One of the better kept secrets of Python is that Modules/Setup can be used for 
building shared modules as well.  I didn't know that until looking into it 
recently as a result of RDM's comment.  See Issue17095.

--
nosy: +ned.deily

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue21541
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Michele Orrù]

Changes by Michele Orrù maker...@gmail.com:


--
nosy: +maker

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue21541
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Pavel Machyniak]

New submission from Pavel Machyniak:

There is no easy way to build python with custom openssl build. This can lead 
to miscellaneous problems (like segmentation faults) in various 
situations/configurations (see eg. 
http://stackoverflow.com/questions/22409092/coredump-when-compiling-python-with-a-custom-openssl-version).
 The problems usually arise when different version of openssl headers and libs 
are used, or when different versions of openssl is required within one process 
(eg. using python within apache httpd process (mod_wsgi or mod_python) + some 
other module that uses explicitly updated/newer/incompatible version of 
openssl).

The best way to workaround this problem would be to have the clear way how to 
build python with specific openssl version. The best way would by to use 
configure options --with-ssl=PATH optionally with --with-ssl-includes=PATH and 
--with-ssl-libs=PATH. In this case, setup.py shall not search for openssl but 
shall use the explicitly specified one.

I will shortly provide the patch for the current version of configure and 
setup.py.

See related issues:
 - http://bugs.python.org/issue5575
 - http://bugs.python.org/issue16660

--
components: Build
messages: 218844
nosy: machyniak
priority: normal
severity: normal
status: open
title: Provide configure option --with-ssl for compilation with custom openssl
type: enhancement
versions: Python 3.5

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue21541
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[R. David Murray]

R. David Murray added the comment:

Aren't things like this normally accomplished by editing Modules/Setup?  
Granted, that's not the most convenient build API...

--
nosy: +r.david.murray

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue21541
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue21541] Provide configure option --with-ssl for compilation with custom openssl

[Pavel Machyniak]

Pavel Machyniak added the comment:

This is the proposed patch (compared 2 trees src  upd where src is latest 
release 3.4.1, upd is my working). Changes are in: configure, setup.py. Please 
review it and hopefully integrate to future releases.

--
keywords: +patch
versions: +Python 3.4 -Python 3.5
Added file: http://bugs.python.org/file35304/issue21541-patch.diff

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue21541
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com