[issue41837] Upgrade installers to OpenSSL 1.1.1i

Change by Ned Deily : -- nosy: +lukasz.langa ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Steve Dower added the comment: Looks like we missed Christian's last message... Have OpenSSL made an updated release? If this issue is as bad as the short description above sounds, I expect they would have. It's possible to rebuild with the patch, but easier if it's a release. (Also,

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Christian Heimes added the comment: I got bad news. OpenSSL 1.1.1i introduced a regression in cert validation. This affects some cases that involve self-signed certificates. Cert validation fails if a self-signed certificate is used as both a trust anchor (root CA) and EE cert. This may

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Christian Heimes added the comment: They are impacted. However 3.7.9 and 3.6.8 were the last releases with binaries for Windows and macOS. All subsequent releases are source-only releases. Since we don't release binaries for 3.6 and 3.7 any more, we typically don't update them. --

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Sebastian Voigt added the comment: The fix has only be done for 3.8, 3.9 and 3.10. Are 3.7 and 3.6 are not impacted? -- nosy: +squear ___ Python tracker ___

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Steve Dower added the comment: I believe this is all done now. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Steve Dower added the comment: New changeset 86b1207dbb9201d1259d1ec7603e720e29ba9042 by Steve Dower in branch '3.8': bpo-41837: Updated Windows installer to include OpenSSL 1.1.1i (GH-24125) https://github.com/python/cpython/commit/86b1207dbb9201d1259d1ec7603e720e29ba9042 --

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Change by Steve Dower : -- pull_requests: +22961 pull_request: https://github.com/python/cpython/pull/24131 ___ Python tracker ___

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Steve Dower added the comment: New changeset c8333931434389ae72da9eb0471054f4393249db by Steve Dower in branch '3.9': bpo-41837: Updated Windows installer to include OpenSSL 1.1.1i (GH-24125) https://github.com/python/cpython/commit/c8333931434389ae72da9eb0471054f4393249db --

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Change by Steve Dower : -- pull_requests: +22957 pull_request: https://github.com/python/cpython/pull/24127 ___ Python tracker ___

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Steve Dower added the comment: New changeset afb71443788a7b20f9104243b3d8d37e3d12cfe2 by Steve Dower in branch 'master': bpo-41837: Updated Windows installer to include OpenSSL 1.1.1i (GH-24125) https://github.com/python/cpython/commit/afb71443788a7b20f9104243b3d8d37e3d12cfe2 --

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Change by Steve Dower : -- pull_requests: +22955 pull_request: https://github.com/python/cpython/pull/24125 ___ Python tracker ___

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Ned Deily added the comment: New changeset 76489dd2998ac70ffb300d612792a7238c03438c by Miss Islington (bot) in branch '3.9': bpo-41837: Update macOS installer build to use OpenSSL 1.1.1i. (GH-24080) (GH-24083) https://github.com/python/cpython/commit/76489dd2998ac70ffb300d612792a7238c03438c

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Ned Deily added the comment: New changeset f24ac455521e46bf9f6c7971aec0e4abec4451c4 by Miss Islington (bot) in branch '3.8': bpo-41837: Update macOS installer build to use OpenSSL 1.1.1i. (GH-24080) (#24084) https://github.com/python/cpython/commit/f24ac455521e46bf9f6c7971aec0e4abec4451c4

[issue41837] Upgrade installers to OpenSSL 1.1.1i

Change by Ned Deily : -- title: Upgrade installers to OpenSSL 1.1.1h -> Upgrade installers to OpenSSL 1.1.1i ___ Python tracker ___