[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[ramikg]

Change by ramikg :


--
nosy: +ramikg
nosy_count: 4.0 -> 5.0
pull_requests: +27116
pull_request: https://github.com/python/cpython/pull/28602

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Illia Volochii]

Change by Illia Volochii :


--
nosy: +illia-v
nosy_count: 3.0 -> 4.0
pull_requests: +27106
pull_request: https://github.com/python/cpython/pull/28768

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Philip Prindeville]

Change by Philip Prindeville :


--
nosy: +philipp

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christer Weinigel]

Change by Christer Weinigel :


--
nosy: +wingel71
nosy_count: 1.0 -> 2.0
pull_requests: +24240
pull_request: https://github.com/python/cpython/pull/25255

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

Christian Heimes  added the comment:


New changeset d37b74f341c5a215e2fdd5eb4f8c0182f327635c by Christian Heimes in 
branch 'master':
bpo-43669: More test_ssl cleanups (GH-25470)
https://github.com/python/cpython/commit/d37b74f341c5a215e2fdd5eb4f8c0182f327635c


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

Change by Christian Heimes :


--
pull_requests: +24195
pull_request: https://github.com/python/cpython/pull/25470

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

Christian Heimes  added the comment:


New changeset b8d0fa035d74ae6ae00794c9af636b427c5dc650 by Christian Heimes in 
branch 'master':
bpo-43669: Remove OpenSSL 0.9 to 1.1.0 specific documentation (GH-25453)
https://github.com/python/cpython/commit/b8d0fa035d74ae6ae00794c9af636b427c5dc650


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

Change by Christian Heimes :


--
pull_requests: +24182
pull_request: https://github.com/python/cpython/pull/25453

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

Christian Heimes  added the comment:

- Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
- Update hashopenssl to require OpenSSL 1.1.1
- multissltests only OpenSSL > 1.1.0
- ALPN is always supported
- SNI is always supported
- Remove deprecated NPN code. Python wrappers are no-op.
- ECDH is always supported
- Remove OPENSSL_VERSION_1_1 macro
- Remove locking callbacks
- Drop PY_OPENSSL_1_1_API macro
- Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
- SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
- security level is always available now
- get_num_tickets is available with TLS 1.3
- X509_V_ERR MISMATCH is always available now
- Always set SSL_MODE_RELEASE_BUFFERS
- X509_V_FLAG_TRUSTED_FIRST is always available
- get_ciphers is always supported
- SSL_CTX_set_keylog_callback is always available
- Update Modules/Setup with static link example
- Mention PEP in whatsnew
- Drop 1.0.2 and 1.1.0 from GHA tests

--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

Christian Heimes  added the comment:


New changeset 39258d3595300bc7b952854c915f63ae2d4b9c3e by Christian Heimes in 
branch 'master':
bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014)
https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

Change by Christian Heimes :


--
keywords: +patch
pull_requests: +23842
stage:  -> patch review
pull_request: https://github.com/python/cpython/pull/23014

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

[Christian Heimes]

New submission from Christian Heimes :

Tracker ticket for PEP 644, https://www.python.org/dev/peps/pep-0644/

This PEP proposes for CPython’s standard library to support only OpenSSL 1.1.1 
LTS or newer. Support for OpenSSL versions past end-of-lifetime, incompatible 
forks, and other TLS libraries are dropped.

--
assignee: christian.heimes
components: SSL
messages: 389823
nosy: christian.heimes
priority: normal
severity: normal
status: open
title: PEP 644: Require OpenSSL 1.1.1 or newer
type: enhancement
versions: Python 3.10

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com