Bug#855864: libpython3.5-minimal: Issues with OpenSSL 1.1

2017-06-02 Thread Christopher Schramm
Hey, this issue will be fixed in OpenSSL 1.1.1 with an SSL_OP_NO_ENCRYPT_THEN_MAC option and I can work around it in OpenSSL 1.1.0 by forcing the use of a stream cipher. I'm currently calling set_ciphers('AESGCM:AESCCM:CHACHA20:!aNULL') on the SSLContext. That requires the server to support any

Bug#855864: libpython3.5-minimal: Issues with OpenSSL 1.1

2017-02-22 Thread Sebastian Andrzej Siewior
On 2017-02-22 16:57:57 [+0100], Christopher Schramm wrote: > I don't know if that issue is related to OpenSSL in general or maybe just the > Debian packages but the only feasible workaround to get a working Python > environment seems to be downgrading to a version that uses libssl1.0.2. as I

Bug#855864: libpython3.5-minimal: Issues with OpenSSL 1.1

2017-02-22 Thread Christopher Schramm
Package: libpython3.5-minimal Version: 3.5.3-1 Severity: normal Hi, I'm having huge problems with HTTPS since this package started using libssl1.1. It is not an issue with the Python packages themselves, but you might want to consider to switch back to libssl1.0.2 because of it. See my report