[issue29394] Cannot tunnel TLS connection through TLS connection

Christian Heimes added the comment: A documentation update wouldn't hurt, though. -- assignee: christian.heimes -> docs@python components: +Documentation -SSL nosy: +docs@python versions: -Python 3.5 ___ Python tracker

[issue31368] RWF_NONBLOCK

New submission from YoSTEALTH: Asynchronous, Non-blocking Buffered File Read "RWF_NONBLOCK" flag for os.open() Link: https://lwn.net/Articles/612483/ https://lwn.net/Articles/613068/ https://lwn.net/Articles/636967/ -- messages: 301508 nosy: YoSTEALTH priority: normal severity: normal

[issue29588] importing ssl can fail with NameError: name 'PROTOCOL_TLS' is not defined

Changes by Christian Heimes : -- resolution: -> works for me stage: -> resolved status: open -> closed type: -> behavior ___ Python tracker

[issue29470] ssl: SNI callbacks should not modify context objects

Christian Heimes added the comment: OK, let's update the documentation with a better example. Are you still interested to contribute a simple example? -- assignee: christian.heimes -> docs@python components: +Documentation -SSL nosy: +docs@python resolution: not a bug -> type: crash

[issue29413] ssl.SSLSocket.unwrap() is not flexible enough

Christian Heimes added the comment: Patches welcome! I don't have resources to work on a patch -- assignee: christian.heimes -> nosy: +alex, dstufft, janssen versions: +Python 3.7 -Python 3.5 ___ Python tracker

[issue1025395] email.Utils.parseaddr fails to parse valid addresses

Alexander Mohr added the comment: looks like these were meant to be internal methods, retracting new issues -- ___ Python tracker ___

[issue29236] 'an ASCII string of one or more PEM-encoded certificates' needs to be unicode

Changes by Christian Heimes : -- components: -SSL ___ Python tracker ___ ___

[issue28671] SSL server requesting client certificates should send CA list

Changes by Christian Heimes : -- assignee: christian.heimes -> stage: -> needs patch versions: +Python 3.7 ___ Python tracker ___

[issue28671] SSL server requesting client certificates should send CA list

Christian Heimes added the comment: It sounds like a sensible request. Documentation links: https://wiki.openssl.org/index.php/Manual:SSL_CTX_set_client_CA_list(3) https://wiki.openssl.org/index.php/Manual:SSL_load_client_CA_file(3) -- nosy: +alex, dstufft, janssen

[issue28453] SSLObject.selected_alpn_protocol() not documented

Christian Heimes added the comment: Yes, please. I'd appreciate a PR with a documentation update. -- versions: +Python 2.7 -Python 3.5 ___ Python tracker

[issue28196] ssl.match_hostname() should check for SRV-ID and URI-ID

Christian Heimes added the comment: Let OpenSSL handle this in the future. -- resolution: -> wont fix stage: test needed -> resolved status: open -> closed ___ Python tracker

[issue28191] Support RFC4985 SRVName in SAN name

Christian Heimes added the comment: FYI, I opened an upstream PR in OpenSSL to add SRVName: https://github.com/openssl/openssl/pull/4342 -- ___ Python tracker

[issue31359] `configure` script incorrectly detects symbols as available on Mac w/ Xcode 8+

Maxime Belanger added the comment: That'd be even better :). I'll also note that this is slightly worse in Python 3 vs Python 2 as there are way more of these to deal with. -- ___ Python tracker

[issue31367] [[]]*int gives x of the same list that cannot be appended to or popped from individually

Zachary Ware added the comment: https://docs.python.org/3/faq/programming.html#how-do-i-create-a-multidimensional-list -- nosy: +zach.ware resolution: -> not a bug stage: -> resolved status: open -> closed ___ Python tracker

[issue31361] Update feedparser.py to prevent theano compiling fail in python3

R. David Murray added the comment: You did not follow the request I made on the PR to explain in this issue you opened what is failing and why. Unless you convince us that this is actually a bug in python, we will close the issue and PR. -- ___

[issue31367] [[]]*int gives x of the same list that cannot be appended to or popped from individually

New submission from Andrew Matte: not a big deal but still -- components: Interpreter Core messages: 301496 nosy: mandrew priority: normal severity: normal status: open title: [[]]*int gives x of the same list that cannot be appended to or popped from individually versions: Python 3.5

[issue29505] Submit the re, json, & csv modules to oss-fuzz testing

Gregory P. Smith added the comment: alright, with that in, feel free to figure out the oss-fuzz configuration side and fire things up Devin. :) -- assignee: -> gregory.p.smith ___ Python tracker

[issue31140] Insufficient error message with incorrect formated string literal

Changes by Łukasz Langa : -- pull_requests: +3396 ___ Python tracker ___ ___

[issue29505] Submit the re, json, & csv modules to oss-fuzz testing

Gregory P. Smith added the comment: New changeset c5bace2bf7874cf47ef56e1d8d19f79ad892eef5 by Gregory P. Smith (Devin Jeanpierre) in branch 'master': bpo-29505: Add fuzz tests for float(str), int(str), unicode(str) (#2878)

[issue24538] os.setxattr PermissionError on panfs propagates up causing `copystat`, `copytree`, and `pip install .` to fail unhepfully

Changes by Maxime Boissonneault : -- nosy: +Maxime Boissonneault ___ Python tracker ___

[issue24538] os.setxattr PermissionError on panfs propagates up causing `copystat`, `copytree`, and `pip install .` to fail unhepfully

Bart Oldeman added the comment: The issue can be avoided by calling _copyxattr *before* instead of after os.chmod in shutil.copystat. That way the file is still writable. The same issue happens on the Lustre parallel file system, with the lustre.lov extended attribute. -- nosy: +Bart

[issue31178] [EASY] subprocess: TypeError: can't concat str to bytes, in _execute_child()

Changes by Gregory P. Smith : -- pull_requests: +3395 ___ Python tracker ___ ___

[issue30912] python 3 git master fails to find libffi and build _ctypes on Mageia v6 x86-64

Zachary Ware added the comment: doko, have you seen/have an opinion on GH-2687? -- nosy: +doko ___ Python tracker ___

[issue30437] SSL_shutdown can return meaningless SSL_ERROR_SYSCALL

Nathaniel Smith added the comment: My reading of the man page is that if SSL_shutdown returns 0, this means that it succeeded at doing the first phase of shutdown. If there are errors then they should be ignored, because it actually succeeded. If you want to then complete the second phase of

[issue26612] test_ssl: use context manager (with) to fix ResourceWarning

Christian Heimes added the comment: Victor, are you still interested to fix this issue? -- assignee: christian.heimes -> haypo versions: +Python 3.7 ___ Python tracker

[issue15464] ssl: add set_msg_callback function

Christian Heimes added the comment: I talked with other ssl module maintainers. We agreed that the debug callback is out of scope for Python stdlib. The ssl does not try to be an all-encompassing wrapper of OpenSSL. -- resolution: -> rejected stage: patch review -> resolved status:

[issue28191] Support RFC4985 SRVName in SAN name

Christian Heimes added the comment: In the future, hostname matching will be handled by OpenSSL. Let's not over-complicate our implementation. -- resolution: -> postponed stage: patch review -> resolved status: open -> closed ___ Python tracker

[issue25404] ssl.SSLcontext.load_dh_params() does not handle unicode filenames properly

Christian Heimes added the comment: Patch welcome :) -- assignee: christian.heimes -> keywords: +easy (C) ___ Python tracker ___

[issue31363] __PYVENV_LAUNCHER__ breaks calling another venv's interpreter

Changes by Ned Deily : -- nosy: +ned.deily, vinay.sajip ___ Python tracker ___ ___

[issue21649] Mention "Recommendations for Secure Use of TLS and DTLS"

Changes by Christian Heimes : -- pull_requests: +3394 ___ Python tracker ___ ___

[issue31340] Use VS 2017 compiler for build

Changes by Steve Dower : -- pull_requests: +3393 ___ Python tracker ___ ___

[issue31340] Use VS 2017 compiler for build

Steve Dower added the comment: New changeset 5fcd5e64eec9ed67613b8fe7356fb8288151ceba by Steve Dower in branch 'master': bpo-31340: Change to building with MSVC v141 (included with Visual Studio 2017) (#3311) https://github.com/python/cpython/commit/5fcd5e64eec9ed67613b8fe7356fb8288151ceba

[issue1025395] email.Utils.parseaddr fails to parse valid addresses

Alexander Mohr added the comment: from 3.6: >>> AddrlistClass('John Smith ').getcomment() '' >>> AddrlistClass('John Smith ').getdomain() 'JohnSmith' totally messed up :) -- ___

[issue15464] ssl: add set_msg_callback function

Christian Heimes added the comment: I'm reluctant to add new features to the ssl module unless they increase security. The message callback is a debugging hook to analyse handshake and other low level parts of the protocol. -- assignee: christian.heimes -> components: -Extension

[issue1025395] email.Utils.parseaddr fails to parse valid addresses

Changes by Alexander Mohr : -- nosy: +thehesiod versions: +Python 3.6, Python 3.7 ___ Python tracker ___

[issue31365] Multiplication issue with 16.1

Terry J. Reedy added the comment: Also, IDLE wraps Python and is not responsible for what Python calculates. -- assignee: terry.reedy -> ___ Python tracker

[issue12378] smtplib.SMTP_SSL leaks socket connections on SSL error

Christian Heimes added the comment: Not a bug in the SSL module. -- assignee: christian.heimes -> components: -SSL versions: +Python 2.7 -Python 3.5 ___ Python tracker

[issue28085] SSL: Add client and server protocols for SSLContext

Christian Heimes added the comment: The issue is resolved. I'll address the other PROTOCOL constants in my upcoming PEP. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker

[issue27240] 'UnstructuredTokenList' object has no attribute '_fold_as_ew'

R. David Murray added the comment: I started rewriting the header folder in response to this bug, because the root problem is a bit deeper than just _fold_as_ew being missing. I will probably work on it some more this week, but if I don't think I'm going to get it finished I'll look at

[issue25115] SSL_set_verify_depth not exposed by the ssl module

Alex Gaynor added the comment: +1 on making sure we have a concrete use case before expanding the API -- nosy: +Alex Gaynor ___ Python tracker ___

[issue25115] SSL_set_verify_depth not exposed by the ssl module

Christian Heimes added the comment: The patch looks fairly simple, but what is your use case? I don't like to clobber the SSLContext with additional features. I have never been in a situation that required me to change the verify depths for chain building. Why do you want to restrict or

[issue13403] Option for XMLPRC Server to support HTTPS

Christian Heimes added the comment: This issue hasn't seen any serious activity in five years. The patch is outdated, too. Is anybody interested to take it? -- assignee: christian.heimes -> components: -SSL ___ Python tracker

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Christian Heimes added the comment: This feature request has been idle for five years. Although TLS-SRP is nice to have, it is not a priority for protocols such as HTTPS. I neither have time nor motivation to create a patch myself. Therefore I'm closing this issue of lack of activity. Please

[issue19084] No way to use TLS-PSK from python ssl

Christian Heimes added the comment: This feature request has been idle for almost four years. Although TLS-PSK is nice to have, it is not a priority for protocols such as HTTPS. I neither have time nor motivation to create a patch myself. Therefore I'm closing this issue of lack of activity.

[issue19084] No way to use TLS-PSK from python ssl

Changes by Christian Heimes : -- resolution: -> out of date stage: needs patch -> resolved status: open -> closed ___ Python tracker

[issue31366] Missing terminator option when using readline with socketserver.StreamRequestHandler

New submission from Thomas Feldmann: When using `socketserver.StreamRequestHandler` it should be possible to specify the newline terminator that is passed to `self.connection.makefile()`. This would be greatly appreciated by many people who have to work with network packets ending with `\0`.

[issue31364] Possible problem with PR #3377

Changes by Denis Osipov : -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker ___

[issue30331] TestPOP3_TLSClass: socket.timeout: timed out on AMD64 FreeBSD 10.x Shared 3.x

Christian Heimes added the comment: I'm removing the SSL component because it looks like an issue with either tests or buildbot. Please re-add the component if it is a bug in the ssl module. -- components: -SSL ___ Python tracker

[issue30437] SSL_shutdown can return meaningless SSL_ERROR_SYSCALL

Christian Heimes added the comment: If I understand the man page of SSL_shutdown correctly, than SSL_shutdown() must be called a second time when the first time returned 0. But it does not say how an application shall behave if the second call to SSL_shutdown() also returns 0. OpenSSL does

[issue30525] Expose SCTs on TLS connections

Christian Heimes added the comment: +1 -- stage: -> needs patch type: -> enhancement ___ Python tracker ___

[issue30867] Add macro `HAVE_OPENSSL_VERIFY_PARAM` to avoid invalid function declaration

Christian Heimes added the comment: OpenSSL 0.9.7 and earlier are no longer supported. In fact OpenSSL < 1.0.2 is no longer maintained by upstream OpenSSL developers. 2.7 is known to work with recent releases such as 0.9.8zh. 0.9.7 is definitely out of scope. -- resolution: -> wont

[issue27340] bytes-like objects with socket.sendall(), SSL, and http.client

Changes by Christian Heimes : -- pull_requests: +3392 ___ Python tracker ___ ___

[issue22559] [2.7] Backport ssl.MemoryBIO to Python 2.7 - PEP 546

Christian Heimes added the comment: #29781 must be backported to 2.7 to fix SSLSocket.version() -- dependencies: +SSLObject.version returns incorrect value before handshake. ___ Python tracker

[issue29781] SSLObject.version returns incorrect value before handshake.

Christian Heimes added the comment: New changeset 6da379bde345926e1f7318ead973767f4d791d3e by Christian Heimes in branch '3.6': [3.6] bpo-29781: Fix SSLObject.version before handshake (GH-3364) (#3381) https://github.com/python/cpython/commit/6da379bde345926e1f7318ead973767f4d791d3e

[issue30403] PEP 547: Running extension modules using -m switch

Stefan Behnel added the comment: Marcel proposed to disallow main-execution if the extension *might* return anything but a real object (not only if it actually does), but that seems excessive to me. The actual problem is that we consider it unsafe if the module is executed more than once,

[issue31355] Remove Travis CI macOS job: rely on buildbots

Antoine Pitrou added the comment: > I'm not aware of many (any?) instances yet where the Travis macOS instance > has caught a problem. It did help me on some delicate signals/threading issues. -- nosy: +pitrou ___ Python tracker

[issue31330] argparse.RawTextHelpFormatter does not maintain lines separated by more than one newline

Elena Oat added the comment: I've created a pull request. Could someone review it please? -- ___ Python tracker ___

[issue31365] Multiplication issue with 16.1

Julie added the comment: Thank you Martin, makes sense now that I have read the documentation. Julie -- ___ Python tracker ___

[issue31365] Multiplication issue with 16.1

Martin Panter added the comment: The floating-point numbers are only accurate to about 16 digits. You probably just found a value that cannot be exactly represented. https://docs.python.org/3.3/faq/design.html#why-are-floating-point-calculations-so-inaccurate -- nosy: +martin.panter

[issue30403] PEP 547: Running extension modules using -m switch

Petr Viktorin added the comment: Do we have a use case for this? I'd rather avoid making it easy to do the wrong thing, unless it's needed. -- ___ Python tracker

[issue30316] test_default_timeout() of test_threading.BarrierTests: random failures on AMD64 FreeBSD CURRENT Debug 3.x

Antoine Pitrou added the comment: Similar failure on AppVeyor: https://ci.appveyor.com/project/python/cpython/build/3.7.0a0.5987#L1146 -- nosy: +kristjan.jonsson, pitrou, tim.peters ___ Python tracker

[issue31360] argparse mutually_exclusive_group under add_argument_group fails if part of parent_processor

Martin Panter added the comment: Seems the same as two other open bugs: Issue 25882 and Issue 16807. -- nosy: +martin.panter resolution: -> duplicate stage: -> resolved status: open -> closed superseder: -> argparse help error: arguments created by add_mutually_exclusive_group() are

[issue31364] Possible problem with PR #3377

Antoine Pitrou added the comment: AppVeyor breaks as well: https://ci.appveyor.com/project/python/cpython/build/3.7.0a0.5986#L200 -- nosy: +pitrou ___ Python tracker

[issue31365] Multiplication issue with 16.1

New submission from Julie: Multipy 16.1 by 100 or 1000 returns a result to 13 decimal places. See example - >>> 16.2*1000 16200.0 >>> 16.1*1000 16100.0002 >>> 16.1*100 1610.2 >>> 16.1*10 161.0 >>> 16.2*1000 16200.0 -- assignee: terry.reedy components: IDLE

[issue31364] Possible problem with PR #3377

Changes by Antoine Pitrou : -- nosy: +benjamin.peterson ___ Python tracker ___ ___

[issue30403] PEP 547: Running extension modules using -m switch

Stefan Behnel added the comment: OTOH, if the created "module" is not a module object, then we could argue that the extension implementation is on its own with that case, and has to do its own re-execution safety checks. -- ___ Python tracker

[issue27240] 'UnstructuredTokenList' object has no attribute '_fold_as_ew'

Raphael Slinckx added the comment: It happens regularly for emails with long header lines for me too, which makes the python3 email module quite unusable. A workaround which seems to help a bit is to set refold_source='none' on the email policy, although it seems to keep happening, less

[issue31353] Implement PEP 553 - built-in debug()

Changes by Ethan Smith : -- nosy: +Ethan Smith ___ Python tracker ___ ___ Python-bugs-list

[issue31364] Possible problem with PR #3377

Changes by Denis Osipov : -- pull_requests: +3391 ___ Python tracker ___ ___

[issue31364] Possible problem with PR #3377

New submission from Denis Osipov: It looks like last PR #3377 changing pytime.c (adding #include ) causing problem with compilation. Now on my Win10 i have multiple warnings and errors about ws2def.h, winsock.h and winsock2.h (see attached file). -- components: Windows files:

[issue31363] __PYVENV_LAUNCHER__ breaks calling another venv's interpreter

New submission from Ilya Kulakov: There are 2 venvs. One has the pkg_resources (pkgr_venv) package installed, another (venv) doesn't. Venv without pkg_resources is currently active. Works: $ /python -c "import pkg_resources" Doesn't work: $ python -c "import subprocess;

[issue31362] "async" and "await" are not keyword

Conor Cal added the comment: thanks Ammar Askar, I also find this Issue is duplidcate, Issue 26264 has the same question. So I'll just close this oen. -- stage: -> resolved status: open -> closed ___ Python tracker

[issue31336] Speed up _PyType_Lookup() for class creation

INADA Naoki added the comment: Confirmed: $ ./python-patched -m perf timeit --compare-to `pwd`/python -- 'class C: pass' python: . 11.9 us +- 0.1 us python-patched: . 10.3 us +- 0.1 us Mean +- std dev: [python] 11.9 us +- 0.1 us -> [python-patched] 10.3

[issue31359] `configure` script incorrectly detects symbols as available on Mac w/ Xcode 8+

Ronald Oussoren added the comment: An alternative solution, which is more invasive is to explicitly use weak linking, as is already used for some ancient APIs in posixmodule.c (look for "lchown" in Modules/posixmodule.c). This is more invasive, but would be helpful for upstream as well

[issue31178] [EASY] subprocess: TypeError: can't concat str to bytes, in _execute_child()

Ammar Askar added the comment: If it doesn't manage to make it by tomorrow afternoon, I can backport it manually. It doesn't look like its been able to do it yet. -- nosy: +ammar2 ___ Python tracker

[issue31361] Update feedparser.py to prevent theano compiling fail in python3

Changes by Serhiy Storchaka : -- components: +email nosy: +barry, r.david.murray ___ Python tracker ___

[issue31361] Update feedparser.py to prevent theano compiling fail in python3

Serhiy Storchaka added the comment: Why not fix theano instead? Implicit stringification of an argument can hide other bugs. The resolution field should be changed only when close an issue. -- nosy: +serhiy.storchaka resolution: fixed -> ___

[issue31178] [EASY] subprocess: TypeError: can't concat str to bytes, in _execute_child()

Gregory P. Smith added the comment: awaiting our new carrot nosed bot the create the backport PR to take care of 3.6 :) -- assignee: -> gregory.p.smith versions: +Python 3.6 -Python 3.7 ___ Python tracker

[issue31178] [EASY] subprocess: TypeError: can't concat str to bytes, in _execute_child()

Gregory P. Smith added the comment: New changeset 3fc499bca18454b9f432b9b0106cab662bfeb549 by Gregory P. Smith (Ammar Askar) in branch 'master': bpo-31178: Avoid concatenating bytes with str in subprocess error (#3066)

[issue31336] Speed up _PyType_Lookup() for class creation

Stefan Behnel added the comment: BTW, it seems that Yury's dict copy optimisation would also help here. When I use a benchmark scenario with a simple non-empty method/attribute dict (from Cython this time), almost 10% of the creation time is spent copying that dict, which should essentially

[issue31362] "async" and "await" are not keyword

Ammar Askar added the comment: For what its worth, "async" and "await" are special keywords. They only act as keywords under certain situations by the tokenizer. You can read more about this here: https://www.python.org/dev/peps/pep-0492/#transition-plan As far as I am aware, this special

[issue31362] "async" and "await" are not keyword

Changes by Conor Cal : -- resolution: -> duplicate ___ Python tracker ___ ___

[issue31362] "async" and "await" are not keyword

Conor Cal added the comment: "async" and "await" became kaywords in CPython 3.6. But they are not in kwlist of the keyword library, and will return False by iskeyword method. -- ___ Python tracker

[issue31362] "async" and "await" are not keyword

Changes by Conor Cal : -- type: -> behavior ___ Python tracker ___ ___

[issue31362] "async" and "await" are not keyword

New submission from Conor Cal: "async" and "await" became kaywords in CPython 3.6. but in the keyword library, they are not in kwlist, and will return False by iskeyword method. -- components: asyncio messages: 301443 nosy: Conor Cal, yselivanov priority: normal severity: normal

<    1   2