Bug 946313 – dev-lang/python-3.12.8: fails with 'ImportError: /usr/lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found' if using binhost package with dev-libs/openssl-3.1* installed

• Status: UNCONFIRMED
• Product: Gentoo Linux

[Description genBTC 2024-12-12 11:08:11 UTC]

As of December 12 2024,
when using the binhost *selectively*, RDEPEND mismatch occurs between python & openssl, resulting in the Error:

dev-lang/python-3.12.8: ImportError: /usr/lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found

The current stabilized version of OpenSSL is 3.3.x :
https://packages.gentoo.org/packages/dev-libs/openssl
So our binhost is serving out binpkgs based on OpenSSL 3.3.x

But all the ebuilds for Python only contain an RDEPEND on OpenSSL 1.1.x:
ssl? ( >=dev-libs/openssl-1.1.1:= )

This is inadequate. until OpenSSL 3.3 is installed, portage will error out & become stuck while python[ssl] is prevented from working (such as this sync/fetch):

# emerge-webrsync
ImportError: Can't connect to HTTPS URL because the SSL module is not available.
 * ERROR: /:: failed:
 *   signature verification failed

dev-lang/python-3.12.8: ImportError: /usr/lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found

Reproducible: Sometimes

Steps to Reproduce:
Conditions needed to reproduce:
1) Hold back OpenSSL to version 3.0, not 3.3 (both marked stable)
2) Install binhost binpkg for python

1. to reproduce the error, launch python and import ssl manually
# python3
> import ssl

2. returns the Error:
dev-lang/python-3.12.8: ImportError: /usr/lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found

[Comment 1 genBTC 2024-12-12 11:09:07 UTC]

Created attachment 913853 [details]
Emerge --info

typical emerge info

[Comment 2 Sam James 2024-12-12 12:34:19 UTC]

This is a messy one that needs some stopgap ideally for the binhost.