[Distutils] Announcement: TLSv1.2 will become mandatory in the future

[Ronald Oussoren]

> On 10 Jan 2017, at 21:02, Donald Stufft <donald at stufft.io> wrote:
> 
> 
>> On Jan 10, 2017, at 3:01 PM, Ronald Oussoren <ronaldoussoren at mac.com <mailto:ronaldoussoren at mac.com>> wrote:
>> 
>> 
>>> On 10 Jan 2017, at 14:24, Donald Stufft <donald at stufft.io <mailto:donald at stufft.io>> wrote:
>>> […] Past that, macOS is going to be the
>>> largest casualty since their system Python does not support TLSv1.2 yet in any
>>> version of their OS.
>> 
>> Not just the system Python on OSX, this also affects all Python.org <http://python.org/> installers for OSX except 3.6. The 3.6 installer is the first one that doesn’t use the system installation of OpenSSL.  Annoyingly with OpenSSL on OSX you have to options: either use an up-to-date release or have OpenSSL use the system CA trust store, but not both.  Sigh…
>> 
>> I have no idea how may users use the Python.org <http://python.org/> installers on OSX, but this has the potential to affect a largish number of users on OSX including newbies (but far from all users on OSX, there’s also a sizeable population using Homebrew or Anaconda).
>> 
>> Ronald
> 
> 
> Ah yea I forgot those :( 

Could you file an issue on bugs.python.org <http://bugs.python.org/> about this? That way Ned will get notified, and the use of system OpenSSL can be reconsidered for a future 2.7 release.


Ronald

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20170110/ba12916f/attachment.html>