[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Christian Heimes]

Change by Christian Heimes :


--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[STINNER Victor]

STINNER Victor  added the comment:


New changeset c49f63c1761ce03df7850b9e0b31a18c432dac64 by Victor Stinner 
(stratakis) in branch '2.7':
[2.7] bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976) (GH-8760) 
(GH-10607)
https://github.com/python/cpython/commit/c49f63c1761ce03df7850b9e0b31a18c432dac64


--
nosy: +vstinner

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Charalampos Stratakis]

Change by Charalampos Stratakis :


--
pull_requests: +11913

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[STINNER Victor]

STINNER Victor  added the comment:


New changeset c3c49ec56890d9d591f8fd1609c8436019f28f96 by Victor Stinner 
(stratakis) in branch '2.7':
[2.7] bpo-33570: Enable OpenSSL 1.1.1 testing within the multissltests 
(GH-11879)
https://github.com/python/cpython/commit/c3c49ec56890d9d591f8fd1609c8436019f28f96


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Christian Heimes]

New submission from Christian Heimes :

The definition and configuration of TLS 1.3 cipher suites has changed during 
the development phase of OpenSSL 1.1.1. The cipher suites are no longer 
prefixed with "TLS13-". TLS 1.3 are always enabled and can no longer be 
disabled with SSLContext.set_ciphers() / SSL_CTX_set_cipher_list(). Instead the 
suites are now configured with SSL_CTX_set_ciphersuites(). See 
https://github.com/openssl/openssl/pull/5392

For now I'm not going to expose the new API. Instead I'll update the 
documentation and tests for 2.7 to 3.8 with new names. I'll also mention that 
TLS 1.3 suites will be always available with OpenSSL 1.1.1.

--
assignee: christian.heimes
components: SSL
messages: 317027
nosy: alex, benjamin.peterson, christian.heimes, dstufft, janssen, ned.deily
priority: high
severity: normal
stage: test needed
status: open
title: OpenSSL 1.1.1 / TLS 1.3 cipher suite changes
type: behavior
versions: Python 2.7, Python 3.6, Python 3.7, Python 3.8

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Christian Heimes]

Change by Christian Heimes :


--
keywords: +patch
pull_requests: +6631
stage: test needed -> patch review

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Christian Heimes]

Christian Heimes  added the comment:


New changeset e8eb6cb7920ded66abc5d284319a8539bdc2bae3 by Christian Heimes in 
branch 'master':
bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976)
https://github.com/python/cpython/commit/e8eb6cb7920ded66abc5d284319a8539bdc2bae3


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[miss-islington]

Change by miss-islington :


--
pull_requests: +6694

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[miss-islington]

miss-islington  added the comment:


New changeset cd57b48ef9a70b7ef693ba52aaf38d7c945ab5d3 by Miss Islington (bot) 
in branch '3.7':
bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976)
https://github.com/python/cpython/commit/cd57b48ef9a70b7ef693ba52aaf38d7c945ab5d3


--
nosy: +miss-islington

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Christian Heimes]

Christian Heimes  added the comment:


New changeset 3e630c541b35c96bfe5619165255e559f577ee71 by Christian Heimes in 
branch '3.6':
bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976) (GH-8760)
https://github.com/python/cpython/commit/3e630c541b35c96bfe5619165255e559f577ee71


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Christian Heimes]

Change by Christian Heimes :


--
pull_requests: +8247

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue33570] OpenSSL 1.1.1 / TLS 1.3 cipher suite changes

[Charalampos Stratakis]

Change by Charalampos Stratakis :


--
pull_requests: +9850

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com