Gregory P. Smith <g...@krypto.org> added the comment:

I had emailed Christian around the same time you filed this.

"""
The problem likely not related to your hardware. I guess it's caused by
tightened crypto polices. OpenSSL 1.1.1 has disabled some weak crypto.
Some platforms like Debian and RHEL require even larger key sizes or
have disable some algorithms. Does the test also fail with the env var
OPENSSL_CONF set to a non-existing path?
""" - christian.heimes

testing that theory... setting OPENSSL_CONF=/invalid-path does indeed "fix" 
(work around) the failures.  Presumably by relaxing the default system 
constraints.

I could have that env var set for this buildbot and eliminate the failure.  But 
do we _want_ to do that?  Anyone who compiles CPython and tries to run the test 
suite on a modern system with such an OpenSSL configuration is going to see 
similar failures and likely come to us first asking about them.

It seems like we'd be better off adjusting our test suite to work around the 
constraints or disable them only for the duration of a test intentionally 
violating them?

----------
title: test_httplib test_nntplib test_ssl fail on ARMv7 Ubuntu 3.7 and ARMv7 
Ubuntu 3.x buildbots -> test_httplib test_nntplib test_ssl fail on ARMv7 
buster/sid buildbots

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue35925>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to