[issue40457] Python fails to compile/load _ssl module if OpenSSL is compiled with no-tls1-method

2020-05-02 Thread Mitch Lindgren
Mitch Lindgren added the comment: Thanks for the quick turnaround! -- ___ Python tracker <https://bugs.python.org/issue40457> ___ ___ Python-bugs-list mailin

[issue40457] Python fails to compile/load _ssl module if OpenSSL is compiled with no-tls1-method

2020-04-30 Thread Mitch Lindgren
Mitch Lindgren added the comment: I'd be happy to work on a patch for this. I think the simplest approach would be to change this block starting on line 3087: if (proto_version == PY_SSL_VERSION_TLS1) ctx = SSL_CTX_new(TLSv1_method()); #if HAVE_TLSv1_2 else if (proto_version

[issue40457] Python fails to compile/load _ssl module if OpenSSL is compiled with no-tls1-method

2020-04-30 Thread Mitch Lindgren
New submission from Mitch Lindgren : I'm working on a project which uses OpenSSL 1.1.1g. For security and compliance reasons, it is built with SSL and TLS < 1.2 methods compiled out, using the following OpenSSL build options: no-ssl no-ssl3 no-tls1 no-tls1_1 no-ssl3-method no-tls1-met