[issue41837] Upgrade installers to OpenSSL 1.1.1i

[Christian Heimes]

Christian Heimes <lists at cheimes.de> added the comment:

I got bad news. OpenSSL 1.1.1i introduced a regression in cert validation. This affects some cases that involve self-signed certificates. Cert validation fails if a self-signed certificate is used as both a trust anchor (root CA) and EE cert. This may affect Python.

Would it be possible to rebuild our OpenSSL binaries with patch https://github.com/openssl/openssl/pull/13749 ?

----------
resolution: fixed -> 
stage: resolved -> patch review
status: closed -> open
type:  -> behavior

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue41837>
_______________________________________