Tests breakage with latest openssl (issue28689)

Hello, Escalating here an issue that seems that it should be tagged as blocker. Currently the latest version of openssl-1.1.0c breaks Python's test suite. The problematic commit was identified [0] and reverted [1] at openssl's upstream, however when running the test suite on a Fedora Rawhide machine, which includes the fix, the tests currently hang (not just failing like before). The issue, with some more details, is tracked here: https://bugs.python.org/issue28689 [0] https://github.com/openssl/openssl/issues/1903 [1] https://github.com/openssl/openssl/commit/beacb0f0c1ae7b0542fe053b95307f515b... Regards, Charalampos Stratakis Associate Software Engineer Python Maintenance Team, Red Hat

Hi Christian and thanks for the fast reply, It's great to hear that the latest version is working fine. Do you have anymore details on the fix/breakage? The latest commit at Fedora's rawhide openssl package is at [0]. Is it missing something? [0] http://pkgs.fedoraproject.org/cgit/rpms/openssl.git/commit/?id=e443a79334446... Regards, Charalampos Stratakis Associate Software Engineer Python Maintenance Team, Red Hat ----- Original Message ----- From: "Christian Heimes" <christian@python.org> To: python-dev@python.org Sent: Monday, November 28, 2016 6:03:34 PM Subject: Re: [Python-Dev] Tests breakage with latest openssl (issue28689) On 2016-11-28 16:35, Charalampos Stratakis wrote:
Hi Charalampos, Python's 3.6 and default (3.7) tests suite is passing with OpenSSL 1.1.0d-dev (OpenSSL_1_1_0-stable branch). Maybe your backport is missing a fix? Christian _______________________________________________ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/cstratak%40redhat.com

On 2016-11-28 18:16, Charalampos Stratakis wrote:
Hi Charalampos, Sorry, I don't have more details other than the Python and OpenSSL tickets. It sounds like the Fedora rawhide fix is not sufficient and may lack something. I don't have any spare cycles to look at the patch. A distribution patch doesn't work for users of other distributions, too. Let's see if I can get the OpenSSL team to release another version soonish. Christian

Hi Christian and thanks for the fast reply, It's great to hear that the latest version is working fine. Do you have anymore details on the fix/breakage? The latest commit at Fedora's rawhide openssl package is at [0]. Is it missing something? [0] http://pkgs.fedoraproject.org/cgit/rpms/openssl.git/commit/?id=e443a79334446... Regards, Charalampos Stratakis Associate Software Engineer Python Maintenance Team, Red Hat ----- Original Message ----- From: "Christian Heimes" <christian@python.org> To: python-dev@python.org Sent: Monday, November 28, 2016 6:03:34 PM Subject: Re: [Python-Dev] Tests breakage with latest openssl (issue28689) On 2016-11-28 16:35, Charalampos Stratakis wrote:
Hi Charalampos, Python's 3.6 and default (3.7) tests suite is passing with OpenSSL 1.1.0d-dev (OpenSSL_1_1_0-stable branch). Maybe your backport is missing a fix? Christian _______________________________________________ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/cstratak%40redhat.com

On 2016-11-28 18:16, Charalampos Stratakis wrote:
Hi Charalampos, Sorry, I don't have more details other than the Python and OpenSSL tickets. It sounds like the Fedora rawhide fix is not sufficient and may lack something. I don't have any spare cycles to look at the patch. A distribution patch doesn't work for users of other distributions, too. Let's see if I can get the OpenSSL team to release another version soonish. Christian
participants (2)
-
Charalampos Stratakis
-
Christian Heimes