homepage

This issue tracker has been migrated to GitHub , and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title: Upgrade OpenSSL on Windows to 0.9.8u
Type: behavior Stage:
Components: Extension Modules Versions: Python 3.2, Python 3.3, Python 2.7
process
Status: closed Resolution: fixed
Dependencies: Superseder:
Assigned To: Nosy List: benjamin.peterson, dino.viehland, georg.brandl, loewis, pitrou, vstinner
Priority: release blocker Keywords:

Created on 2012年04月10日 23:17 by dino.viehland, last changed 2022年04月11日 14:57 by admin. This issue is now closed.

Files
File name Uploaded Description Edit
repro.py dino.viehland, 2012年04月10日 23:17 Simple repro using httplib, but not standalone.
Messages (6)
msg157995 - (view) Author: Dino Viehland (dino.viehland) * (Python committer) Date: 2012年04月10日 23:17
OpenSSL has had many fixes since the 0.9.8l version, and in particular there is one issue which prevents it from connecting with SSL with a client certificate: the end result is the SSL connection hangs or times out.
Updating the OpenSSL version will fix this and enable better compatibility across platforms.
I've attached my repro but if you want to try it you'll need a different server + private key pair to authenticate with. I've also confirmed re-building Python with 0.9.8m fixes the problem and Python currently ships with 0.9.8l.
msg157996 - (view) Author: STINNER Victor (vstinner) * (Python committer) Date: 2012年04月10日 23:20
Why not upgrading to OpenSSL 1.0, at least for Python 3.3?
msg157997 - (view) Author: Antoine Pitrou (pitrou) * (Python committer) Date: 2012年04月10日 23:31
Well, 3.3 already links with openssl-1.0.0a. However, updating to the latest 1.0.x would probably be good.
msg157998 - (view) Author: Dino Viehland (dino.viehland) * (Python committer) Date: 2012年04月10日 23:38
A 1.0 version would be fine w/ me (I tested it with one of those and it worked as well) - I was just thinking a bug fix release might want to stick w/ a bug fix release of OpenSSL too.
msg157999 - (view) Author: Antoine Pitrou (pitrou) * (Python committer) Date: 2012年04月10日 23:43
> A 1.0 version would be fine w/ me (I tested it with one of those and
> it worked as well) - I was just thinking a bug fix release might want
> to stick w/ a bug fix release of OpenSSL too.
Agreed, I was replying to Victor about 3.3.
msg161051 - (view) Author: Martin v. Löwis (loewis) * (Python committer) Date: 2012年05月18日 14:37
I have now upgraded OpenSSL to 0.9.8x for 2.7, to 1.0.0j for 3.2, and to 1.0.1c for 3.3.
History
Date User Action Args
2022年04月11日 14:57:29adminsetgithub: 58748
2012年05月18日 14:37:56loewissetstatus: open -> closed
resolution: fixed
2012年05月18日 14:37:45loewissetnosy: + loewis
messages: + msg161051
2012年04月10日 23:43:17pitrousetmessages: + msg157999
2012年04月10日 23:38:00dino.viehlandsetmessages: + msg157998
2012年04月10日 23:31:39pitrousetnosy: + georg.brandl

messages: + msg157997
versions: + Python 3.2, Python 3.3
2012年04月10日 23:20:25vstinnersetnosy: + vstinner
messages: + msg157996
2012年04月10日 23:19:09vstinnersetnosy: + pitrou
2012年04月10日 23:17:48dino.viehlandcreate

AltStyle によって変換されたページ (->オリジナル) /