Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014) #23014

Merged
merged 1 commit into from
Apr 17, 2021

Conversation

tiran
Copy link
Member

@tiran tiran commented Oct 28, 2020

  • Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
  • Update hashopenssl to require OpenSSL 1.1.1
  • multissltests only OpenSSL > 1.1.0
  • ALPN is always supported
  • SNI is always supported
  • Remove deprecated NPN code. Python wrappers are no-op.
  • ECDH is always supported
  • Remove OPENSSL_VERSION_1_1 macro
  • Remove locking callbacks
  • Drop PY_OPENSSL_1_1_API macro
  • Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
  • SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
  • security level is always available now
  • get_num_tickets is available with TLS 1.3
  • X509_V_ERR MISMATCH is always available now
  • Always set SSL_MODE_RELEASE_BUFFERS
  • X509_V_FLAG_TRUSTED_FIRST is always available
  • get_ciphers is always supported
  • SSL_CTX_set_keylog_callback is always available
  • Update Modules/Setup with static link example
  • Mention PEP in whatsnew
  • Drop 1.0.2 and 1.1.0 from GHA tests

https://bugs.python.org/issue43669

@github-actions
Copy link

This PR is stale because it has been open for 30 days with no activity. Remove stale label or comment or this will be closed in 5 days

@github-actions github-actions bot added the stale Stale PR or inactive for long period of time. label Dec 16, 2020
@tiran tiran changed the title PEP 644: Require OpenSSL 1.1.1 or newer bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer Mar 30, 2021
@tiran tiran removed DO-NOT-MERGE stale Stale PR or inactive for long period of time. labels Mar 30, 2021
@tiran tiran force-pushed the pep-644 branch 2 times, most recently from 0704819 to edab5a6 Compare April 17, 2021 08:09
@tiran tiran marked this pull request as ready for review April 17, 2021 09:04
- Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
- Update hashopenssl to require OpenSSL 1.1.1
- multissltests only OpenSSL > 1.1.0
- ALPN is always supported
- SNI is always supported
- Remove deprecated NPN code. Python wrappers are no-op.
- ECDH is always supported
- Remove OPENSSL_VERSION_1_1 macro
- Remove locking callbacks
- Drop PY_OPENSSL_1_1_API macro
- Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
- SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
- security level is always available now
- get_num_tickets is available with TLS 1.3
- X509_V_ERR MISMATCH is always available now
- Always set SSL_MODE_RELEASE_BUFFERS
- X509_V_FLAG_TRUSTED_FIRST is always available
- get_ciphers is always supported
- SSL_CTX_set_keylog_callback is always available
- Update Modules/Setup with static link example
- Mention PEP in whatsnew
- Drop 1.0.2 and 1.1.0 from GHA tests
@tiran tiran changed the title bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014) Apr 17, 2021
@tiran tiran merged commit 39258d3 into python:master Apr 17, 2021
@tiran tiran deleted the pep-644 branch April 17, 2021 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants