[issue38794] Setup: support linking openssl statically

William Woodruff added the comment: Not to butt in too much, but I have a related use case that would benefit from being able to statically link to OpenSSL: I have an environment in which dynamic modules are acceptable, but where the entire Python install benefits from being relocatable and

[issue38794] Setup: support linking openssl statically

Christian Heimes added the comment: I introduced several build improvements for better support of custom OpenSSL builds in bpo-43466. The issue mentions a new, undocumented, and unsupported hack to create a shared extension modules with statically linked OpenSSL. The Modules/Setup.local tric

[issue38794] Setup: support linking openssl statically

William Woodruff added the comment: Cheers! No promises about not using the hack, but I *will* promise not to complain if it doesn't work for me :-) -- ___ Python tracker ___

[issue38794] Setup: support linking openssl statically

Lukas Vacek added the comment: For the record, this would have been solved more than a year ago already. When this change was proposed more than a year ago it was rejected with "There is no need to add more configure flags to build Python with a custom OpenSSL installation. " yet now it's ok

[issue38794] Setup: support linking openssl statically

William Woodruff added the comment: I don't think this is a productive or polite response. If you read the issue linked, you'll note that the other flag added (--with-openssl-rpath) is in furtherance of any *already* supported linking scenario (dynamic, with a non-system-default OpenSSL). The

[issue38794] Setup: support linking openssl statically

Christian Heimes added the comment: Lukas, no, some guy called Bill approached me at our last Illuminati meeting in Hollow Earth. He asked me to implement static linking for his next-gen secret brain chip. In exchange for the favor I was allowed to ride his T-Rex. True story! Thanks, William

[issue38794] Setup: support linking openssl statically

Lukas Vacek added the comment: Thanks for the explanation of the secret workings behind the scenes. What a productive and polite response. -- ___ Python tracker ___ _

[issue38794] Setup: support linking openssl statically

Change by Lukas Vacek : -- title: Setup: support linking openssl staticly -> Setup: support linking openssl statically ___ Python tracker ___ _

[issue38794] Setup: support linking openssl statically

Christian Heimes added the comment: Since this is a request for a new feature, I'm bumping versions to 3.9 and newer. There is no need to add more configure flags to build Python with a custom OpenSSL installation. It's sufficient to build OpenSSL as a shared library and run Python's config

[issue38794] Setup: support linking openssl statically

Lukas Vacek added the comment: Fair enough. Btw. I picked versions 3.7 and up to show this feature should eventually be backported to older CPython versions that depend on OpenSSL >= 1.0.2. This feature is to avoid relying on rpath and relying on a seperate installation to be installed in

[issue38794] Setup: support linking openssl statically

Lukas Vacek added the comment: However, I'm still convinced many would appreciate adding this ./configure option: https://github.com/pyenv/pyenv/issues/1184#issuecomment-403149437 https://joshspicer.com/python37-ssl-issue https://superuser.com/questions/1428109/install-python-3-7-3-from-sourc

[issue38794] Setup: support linking openssl statically

Christian Heimes added the comment: I'm drawing a different conclusion from these posts. It sounds to me like people want a simple way to install a new version of Python on old distros and have a working ssl module. Static linking is one possible way to archive the goal. I argue that it is n

[issue38794] Setup: support linking openssl statically

Lukas Vacek added the comment: In ideal world OpenSSL would provide stable ABI just like the other libraries Python depends on. That would be, unarguably, the best way to achieve that goal. Agreed. Aferall frequent OpenSSL ABI breakages are the reason why apple switched to their own cryptogr

[issue38794] Setup: support linking openssl statically

Christian Heimes added the comment: > In ideal world OpenSSL would provide stable ABI just like the other libraries > Python depends on. That would be, unarguably, the best way to achieve that > goal. Agreed. OpenSSL provides a stable API and stable ABI already. The fact is well documented

[issue38794] Setup: support linking openssl statically

Lukas Vacek added the comment: Christian, I don't want to argue. Feel free to close both this bug and the PR as "enhancement rejected". Adding one ./configure option is not really worth arguing over, I can always compile python as I need. I just tried to solve the same problem for others bec