[Python-Dev] Python 3.7: Require OpenSSL >=1.0.2 / LibreSSL >= 2.5.3

[Matt Billenstein]

Correct me if I'm wrong, but Python3 on osx bundles openssl since Apple has
deprecated (and no longer ships the header files for) the version shipped with
recent versions of osx.

Perhaps this is an option to support the various flavors of Linux as well?

m

On Sun, Jan 14, 2018 at 02:48:49AM +0000, Paul G wrote:
>    One thing to note is that if getting Travis working with Python 3.7 is a
>    pain, a huge number of libraries on PyPI probably just won't test against
>    Python 3.7, which is not a great situation to be in.
> 
>    It's probably worth contacting Travis to give them a head's up and see how
>    likely it is that they'll be able to support Python 3.7 if it requires a
>    newer version of these libraries.
> 
>    On January 14, 2018 2:16:53 AM UTC, Brett Cannon <brett at python.org> wrote:
> 
>      On Sat, Jan 13, 2018, 14:45 Christian Heimes, <christian at python.org>
>      wrote:
> 
>        On 2018-01-13 21:02, Brett Cannon wrote:
>        > +1 from me as well for the improved security.
> 
>        Thanks, Brett!
> 
>        How should we handle CPython's Travis CI tests? The 14.04 boxes have
>        OpenSSL 1.0.1. To the best of my knowledge, Travis doesn't offer
>        16.04.
>        We could either move to container-based testing with a 16.04
>        container,
>        which would give us 1.0.2 Or we could compile our own copy of OpenSSL
>        with my multissl builder and use some rpath magic.
> 
>        In order to test all new features, Ubuntu doesn't cut it. Even current
>        snapshot of Ubuntu doesn't contain OpenSSL 1.1. Debian Stretch or
>        Fedora
>        would do the trick, though.
> 
>        Maybe Barry's work on official test container could leveraged testing?
> 
>      My guess is we either move to containers on Travis, see if we can
>      manually install -- through apt or something -- a newer version of
>      OpenSSL, or we look at alternative CI options.
>      -Brett
> 
>        Regards,
>        Christian

> _______________________________________________
> Python-Dev mailing list
> Python-Dev at python.org
> https://mail.python.org/mailman/listinfo/python-dev
> Unsubscribe: https://mail.python.org/mailman/options/python-dev/matt%40vazor.com


-- 
Matt Billenstein
matt at vazor.com
http://www.vazor.com/