[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-02-19 Thread Ned Deily 


Change by Ned Deily :


--
nosy: +lukasz.langa

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-02-19 Thread Steve Dower 


Steve Dower  added the comment:

Looks like we missed Christian's last message...

Have OpenSSL made an updated release? If this issue is as bad as the short 
description above sounds, I expect they would have.

It's possible to rebuild with the patch, but easier if it's a release.

(Also, Christian, should this have been a release blocker? We just made fast 
releases for a security concern...)

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-15 Thread Christian Heimes 


Christian Heimes  added the comment:

I got bad news. OpenSSL 1.1.1i introduced a regression in cert validation. This 
affects some cases that involve self-signed certificates. Cert validation fails 
if a self-signed certificate is used as both a trust anchor (root CA) and EE 
cert. This may affect Python.

Would it be possible to rebuild our OpenSSL binaries with patch 
https://github.com/openssl/openssl/pull/13749 ?

--
resolution: fixed -> 
stage: resolved -> patch review
status: closed -> open
type:  -> behavior

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-07 Thread Christian Heimes 


Christian Heimes  added the comment:

They are impacted. However 3.7.9 and 3.6.8 were the last releases with binaries 
for Windows and macOS. All subsequent releases are source-only releases. Since 
we don't release binaries for 3.6 and 3.7 any more, we typically don't update 
them.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-07 Thread Sebastian Voigt 


Sebastian Voigt  added the comment:

The fix has only be done for 3.8, 3.9 and 3.10. Are 3.7 and 3.6 are not 
impacted?

--
nosy: +squear

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-05 Thread Steve Dower 


Steve Dower  added the comment:

I believe this is all done now.

--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-05 Thread Steve Dower 


Steve Dower  added the comment:


New changeset 86b1207dbb9201d1259d1ec7603e720e29ba9042 by Steve Dower in branch 
'3.8':
bpo-41837: Updated Windows installer to include OpenSSL 1.1.1i (GH-24125)
https://github.com/python/cpython/commit/86b1207dbb9201d1259d1ec7603e720e29ba9042


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-05 Thread Steve Dower 


Change by Steve Dower :


--
pull_requests: +22961
pull_request: https://github.com/python/cpython/pull/24131

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-05 Thread Steve Dower 


Steve Dower  added the comment:


New changeset c8333931434389ae72da9eb0471054f4393249db by Steve Dower in branch 
'3.9':
bpo-41837: Updated Windows installer to include OpenSSL 1.1.1i (GH-24125)
https://github.com/python/cpython/commit/c8333931434389ae72da9eb0471054f4393249db


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-05 Thread Steve Dower 


Change by Steve Dower :


--
pull_requests: +22957
pull_request: https://github.com/python/cpython/pull/24127

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-05 Thread Steve Dower 


Steve Dower  added the comment:


New changeset afb71443788a7b20f9104243b3d8d37e3d12cfe2 by Steve Dower in branch 
'master':
bpo-41837: Updated Windows installer to include OpenSSL 1.1.1i (GH-24125)
https://github.com/python/cpython/commit/afb71443788a7b20f9104243b3d8d37e3d12cfe2


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-05 Thread Steve Dower 


Change by Steve Dower :


--
pull_requests: +22955
pull_request: https://github.com/python/cpython/pull/24125

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-04 Thread Ned Deily 


Ned Deily  added the comment:


New changeset 76489dd2998ac70ffb300d612792a7238c03438c by Miss Islington (bot) 
in branch '3.9':
bpo-41837: Update macOS installer build to use OpenSSL 1.1.1i. (GH-24080) 
(GH-24083)
https://github.com/python/cpython/commit/76489dd2998ac70ffb300d612792a7238c03438c


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-04 Thread Ned Deily 


Ned Deily  added the comment:


New changeset f24ac455521e46bf9f6c7971aec0e4abec4451c4 by Miss Islington (bot) 
in branch '3.8':
bpo-41837: Update macOS installer build to use OpenSSL 1.1.1i. (GH-24080) 
(#24084)
https://github.com/python/cpython/commit/f24ac455521e46bf9f6c7971aec0e4abec4451c4


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue41837] Upgrade installers to OpenSSL 1.1.1i

2021-01-04 Thread Ned Deily 


Change by Ned Deily :


--
title: Upgrade installers to OpenSSL 1.1.1h -> Upgrade installers to OpenSSL 
1.1.1i

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com