delta/cpython-git.git/Tools/ssl, branch master github.com: python/cpython.git bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205) 2021-09-07T17:04:55+00:00 Christian Heimes christian@python.org 2021-09-07T17:04:55+00:00 cc7c6801945c6a7373553b78bd899ce09681ec0a Signed-off-by: Christian Heimes <christian@python.org> 
Signed-off-by: Christian Heimes <christian@python.org>
 bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) 2021-08-30T12:24:51+00:00 Łukasz Langa lukasz@langa.pl 2021-08-30T12:24:51+00:00 d6cb5dd9e19210f5963ff8beadde7ca2fda71574 This was missed while upgrading CI. 
This was missed while upgrading CI.
 bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769) 2021-06-19T09:08:41+00:00 Christian Heimes christian@python.org 2021-06-19T09:08:41+00:00 44fb55149934d8fb095edb6fc3f8167208035b96 Signed-off-by: Christian Heimes <christian@python.org> 
Signed-off-by: Christian Heimes <christian@python.org>
 bpo-38820: Test with OpenSSL 3.0.0-alpha17 (#26266) 2021-05-20T14:46:38+00:00 Christian Heimes christian@python.org 2021-05-20T14:46:38+00:00 7109624d45bcf28fbb46a53354785dc5ff953a16 






bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942)
2021-05-06T14:30:12+00:00

Christian Heimes
christian@python.org

2021-05-06T14:30:12+00:00

e8525567dd325527e00b3c4ce7c4ce31ff3f1a8c

Also use new make target to install FIPS provider.




Also use new make target to install FIPS provider.






bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624)
2021-04-26T08:54:12+00:00

Christian Heimes
christian@python.org

2021-04-26T08:54:12+00:00

3c586ca500854476e6eff06713236faff233d035

Signed-off-by: Christian Heimes <christian@python.org>




Signed-off-by: Christian Heimes <christian@python.org>






bpo-38820: Test with OpenSSL 3.0.0-alpha15 (GH-25537)
2021-04-23T12:19:21+00:00

Christian Heimes
christian@python.org

2021-04-23T12:19:21+00:00

dcf658157df11de198a98e3db2a3050dd4f6b973

Signed-off-by: Christian Heimes <christian@python.org>




Signed-off-by: Christian Heimes <christian@python.org>






bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014)
2021-04-17T09:36:35+00:00

Christian Heimes
christian@python.org

2021-04-17T09:36:35+00:00

39258d3595300bc7b952854c915f63ae2d4b9c3e

- Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
- Update hashopenssl to require OpenSSL 1.1.1
- multissltests only OpenSSL > 1.1.0
- ALPN is always supported
- SNI is always supported
- Remove deprecated NPN code. Python wrappers are no-op.
- ECDH is always supported
- Remove OPENSSL_VERSION_1_1 macro
- Remove locking callbacks
- Drop PY_OPENSSL_1_1_API macro
- Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
- SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
- security level is always available now
- get_num_tickets is available with TLS 1.3
- X509_V_ERR MISMATCH is always available now
- Always set SSL_MODE_RELEASE_BUFFERS
- X509_V_FLAG_TRUSTED_FIRST is always available
- get_ciphers is always supported
- SSL_CTX_set_keylog_callback is always available
- Update Modules/Setup with static link example
- Mention PEP in whatsnew
- Drop 1.0.2 and 1.1.0 from GHA tests




- Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
- Update hashopenssl to require OpenSSL 1.1.1
- multissltests only OpenSSL > 1.1.0
- ALPN is always supported
- SNI is always supported
- Remove deprecated NPN code. Python wrappers are no-op.
- ECDH is always supported
- Remove OPENSSL_VERSION_1_1 macro
- Remove locking callbacks
- Drop PY_OPENSSL_1_1_API macro
- Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
- SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
- security level is always available now
- get_num_tickets is available with TLS 1.3
- X509_V_ERR MISMATCH is always available now
- Always set SSL_MODE_RELEASE_BUFFERS
- X509_V_FLAG_TRUSTED_FIRST is always available
- get_ciphers is always supported
- SSL_CTX_set_keylog_callback is always available
- Update Modules/Setup with static link example
- Mention PEP in whatsnew
- Drop 1.0.2 and 1.1.0 from GHA tests






bpo-43788: Generate version specific _ssl_data.h (GH-25300)
2021-04-09T15:02:00+00:00

Christian Heimes
christian@python.org

2021-04-09T15:02:00+00:00

150af7543214e1541fa582374502ac1cd70e8eb4

Signed-off-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran




Signed-off-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran






bpo-43631: Update to OpenSSL 1.1.1k (GH-25024)
2021-03-30T00:00:34+00:00

Christian Heimes
christian@python.org

2021-03-30T00:00:34+00:00

a54fc683f237d8f0b6e999a63aa9b8c0a45b7fef

- [x] Build OpenSSL 1.1.1k for macOS
- [x] Build OpenSSL 1.1.1k for Windows

I have also updated multissl tester and various CI configurations to use latest OpenSSL. The versions were all over the place.

Signed-off-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran




- [x] Build OpenSSL 1.1.1k for macOS
- [x] Build OpenSSL 1.1.1k for Windows

I have also updated multissl tester and various CI configurations to use latest OpenSSL. The versions were all over the place.

Signed-off-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran