[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[Antoine Pitrou]

Antoine Pitrou added the comment:

For ancient OSes such as RHEL 4, I would suggest people request backports from 
the OS vendor if desired.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[Mișu Moldovan]

Mișu Moldovan added the comment:

For the record, this is an issue in Red Hat Enterprise Linux 4 too. For RHEL 4, 
"Extended" support ends on March 31, 2017, according to 
https://access.redhat.com/support/policy/updates/errata

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[Antoine Pitrou]

Antoine Pitrou added the comment:

0.9.7 is truly ancient. I'd rather not add more conditional code and let people 
maintain their fork of Python if they already maintain a fork of OpenSSL.

--
nosy: +alex, dstufft, giampaolo.rodola, janssen
resolution:  -> rejected
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[Mișu Moldovan]

Mișu Moldovan added the comment:

Starting with 2.7.9, this affects the 2.7 branch as well.

Please note that it's not only out-of-maintenance FreeBSD versions that are 
affected, but also a current version of Solaris, namely Solaris 10. The end of 
"Premier" support for Solaris 10 is January 2018 and the end of "Extended" 
support for Solaris 10 is January 2021, according to 
http://www.oracle.com/us/support/library/lifetime-support-hardware-301321.pdf

Solaris 10 has OpenSSL 0.9.7 and all security fixes are back-ported to it, more 
at https://blogs.oracle.com/darren/entry/openssl_versions_in_solaris

--
nosy: +dumol
versions: +Python 2.7

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[David Bolen]

David Bolen added the comment:

I suppose it depends on what the current policy (if any) is.  Not sure how far 
back we would officially claim to support even today.  We have a 6.4 buildbot 
due to history, but it's never made the stable list, and is probably in a 
failing state as much or more as passing.  Certainly in the FreeBSD world, I 
expect the overlap between anyone still using FreeBSD 6 and yet wanting to use 
the latest and greatest python is awfully small.

With respect to PEP 11 though, noting that we no longer support OpenSSL < 0.9.8 
as of some release seems a reasonable point.  Not sure I'd specifically target 
FreeBSD 6.4 as much as OpenSSL.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[STINNER Victor]

STINNER Victor added the comment:

If we drop support of FreeBSD older than 8.x for example, we should
make it official. Mention it at least in the What's New in Python 3.5
and/or the PEP 11. What do you think?

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[David Bolen]

David Bolen added the comment:

Both of my FreeBSD buildbots are quite ancient (particularly so with 
FreeBSD/6.4), and mostly still exist because of lack of pressure to change 
them, and at least for a while having an older, legacy FreeBSD buildbot was of 
some use.

I have no plans on upgrading though, but always assumed I'd just retire them if 
they became more hassle than they were worth.  Certainly I wouldn't worry too 
much about supporting 6.4 in ongoing development, so the writing might be on 
the wall now for that buildbot.

-- David

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[Berker Peksag]

Changes by Berker Peksag :


--
nosy: +db3l

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[Stefan Krah]

Changes by Stefan Krah :


--
nosy:  -skrah

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[Stefan Krah]

Stefan Krah added the comment:

FreeBSD 6.4 is EOL though, for quite some time already:

http://lists.freebsd.org/pipermail/freebsd-announce/2010-September/001344.html


Maybe we should ask the buildbot owner to upgrade to something
newer.

--
nosy: +skrah

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[koobs]

Changes by koobs :


--
nosy: +koobs

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20981] ssl doesn't build anymore with OpenSSL 0.9.7 or older: X509_check_ca

[STINNER Victor]

Changes by STINNER Victor :


--
title: ssl doesn't build anymore with OpenSSL 0.9.7 or older -> ssl doesn't 
build anymore with OpenSSL 0.9.7 or older: X509_check_ca

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com