[New-bugs-announce] [issue36005] [2.7] test_ssl failures on ARMv7 Ubuntu 2.7 with OpenSSL 1.1.1a

[STINNER Victor]

New submission from STINNER Victor <vstinner at redhat.com>:

Extract of pythoninfo:

ssl.HAS_SNI: True
ssl.OPENSSL_VERSION: OpenSSL 1.1.1a  20 Nov 2018
ssl.OPENSSL_VERSION_INFO: (1, 1, 1, 1, 15)
ssl.OP_ALL: -0x7fffffac
ssl.OP_NO_TLSv1_1: 0x10000000

https://buildbot.python.org/all/#/builders/92/builds/325

Many tests with TLS errors. A few examples:

ERROR: test_connect (test.test_ssl.NetworkedTests)
...
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

ERROR: test_protocol_sslv23 (test.test_ssl.ThreadedTests)
Connecting to an SSLv23 server with various client options
----------------------------------------------------------------------
...
    self._sslobj.do_handshake()
SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:727)

ERROR: test_networked_good_cert (test.test_httplib.HTTPSTest)
...
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

ERROR: test_context_argument (test.test_urllibnet.urlopen_HttpsTests)
...
IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

--

There are other failures which may be unrelated:

ERROR: test_fileno (test.test_urllib2net.OtherNetworkTests)
...
HTTPError: HTTP Error 404: Not Found



This buildbot build contains 5 changes:

    [2.7] bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976) (GH-8760) (GH-10607)(3 hours ago)
    bpo-35746: Credit Colin Read and Nicolas Edet (GH-11866)(5 hours ago)
    Doc sidebar: 3.6 has moved to security-fix mode. (GH-11810)(5 days ago)
    [2.7] Fix url to core-mentorship mailing list (GH-11775). (GH-11778)(9 days ago)
    bpo-25592: Improve documentation of distutils data_files (GH-9767) (GH-11734)(13 days ago)

I bet that it's a regression caused by:

https://github.com/python/cpython/commit/c49f63c1761ce03df7850b9e0b31a18c432dac64

----------
components: Tests
messages: 335619
nosy: vstinner
priority: normal
severity: normal
status: open
title: [2.7] test_ssl failures on ARMv7 Ubuntu 2.7 with OpenSSL 1.1.1a
type: security
versions: Python 2.7

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue36005>
_______________________________________