On Fri, 07 Jun 2013 00:37:01 +0200 Christian Heimes <christian@python.org> wrote:
I'm also thinking about OCSP support and X509v3 extension support for _decode_certificate(). Both are a PITB ... Python has an easier and better documented C API.
Yes, OpenSSL's documentation is often a joke, unfortunately.
Question: What's the minimum version of OpenSSL Python 3.4 is going to support?
Judging by the kind of machines we run on, I would say 0.9.7something. Basically I don't think we should remove any existing #ifdef for 3.4.
Do we have an easy way to compile and link Python against a custom installation of OpenSSL or do I have to fiddle around with CPPFLAGS and CFLAGS?
You have to fiddle around, sadly. (and you will also have to fiddle around with LD_LIBRARY_PATH) If you find a way to improve that, your contribution is much welcome :-) Regards Antoine.