Created attachment 444486 [details] build.log Failed to build these modules: _hashlib _ssl All slots are affected.
This issue was fixed in: Python 3.6.0 beta 1: https://docs.python.org/3.6/whatsnew/changelog.html Python 2.7.13: https://hg.python.org/cpython/raw-file/v2.7.13/Misc/NEWS and will be fixed with the upcoming Python 3.5.3 release candidate 1: https://docs.python.org/3.5/whatsnew/changelog.html It appears the issue will not be address in Python 3.4.
Since we build openssl 1.1.0c with --api=1.1, the compatibility fixes currently in python upstream's default branch are not sufficient. For example, 'X509_get_notBefore' is still used.[0] 0: https://hg.python.org/cpython/file/af363b5200ff/Modules/_ssl.c#l1339
Somebody should report that to python upstream.
I reported the remaining issues upstream. http://bugs.python.org/issue30008
*** Bug 627684 has been marked as a duplicate of this bug. ***
Created attachment 498216 [details, diff] python-2.7.14-openssl-1.1.0.patch
Created attachment 498218 [details, diff] python-3.4.6-openssl-1.1.0.patch
Created attachment 498220 [details, diff] python-3.5.4-openssl-1.1.0.patch
Created attachment 498224 [details, diff] python-3.6.3-openssl-1.1.0.patch I submitted these patches (by me, except the 3.4.6 patch has backported changes from 3.5.4 and 3.6.3) in the upstream bug report.
Thanks very much for the effort on this!
Created attachment 498594 [details, diff] python-2.7.14-p1-emulate-TLS-methods.patch
Created attachment 498596 [details, diff] python-2.7.14-p2-openssl-1.1.patch Backport of the second patch of the 2 proposed patches from python 3.7.0a to 2.7.14.
Created attachment 498600 [details, diff] python-3.4.6-p1-Port-Python-s-SSL-module-to-OpenSSL-1.1.0.patch First of three patches for python 3.4.6: The Port-Python-s-SSL-module-to-OpenSSL-1.1.0-5.patch patch from https://bugs.python.org/issue26470 adapted to apply to python 3.4.6.
Created attachment 498602 [details, diff] python-3.4.6-p2-emulate-TLS-methods.patch The second of 3 patches for python 3.4.6: The backport (by me) of the first prosposed patch from python 3.7.0a to 3.4.6 from https://github.com/python/cpython/pull/3934 (by tiran from upstream)
Created attachment 498604 [details, diff] python-3.4.6-p3-openssl-1.1.patch The third of 3 patches for python 3.4.6: The backport (by me) of the second prosposed patch from python 3.7.0a to 3.4.6 from https://github.com/python/cpython/pull/3943 (by me).
Created attachment 498606 [details, diff] python-3.5.4-p1-emulate-TLS-methods.patch The first of 2 patches for python 3.5.4 The backport (by me) of the first prosposed patch from python 3.7.0a to 3.5.4 from https://github.com/python/cpython/pull/3934 (by tiran from upstream)
Created attachment 498608 [details, diff] python-3.5.4-p2-openssl-1.1.patch The second of 2 patches for python 3.5.4: The backport (by me) of the second prosposed patch from python 3.7.0a to 3.5.4 from https://github.com/python/cpython/pull/3943 (by me).
Created attachment 498610 [details, diff] python-3.6.3-p1-emulate-TLS-methods.patch The first of 2 patches for python 3.6.3. The backport (by me) of the first prosposed patch from python 3.7.0a to 3.6.3 from https://github.com/python/cpython/pull/3934 (by tiran from upstream)
Created attachment 498612 [details, diff] python-3.6.3-p2-openssl-1.1.patch The second of 2 patches for python 3.6.3: The backport (by me) of the second prosposed patch from python 3.7.0a to 3.6.3 from https://github.com/python/cpython/pull/3943 (by me).
mark, would you say that upstream is not going to backport support for ossl-1.1 to anything?
I've compile-/use-tested the following python versions and they all build and work successfully with openssl-1.1: dev-lang/python-2.7.15 dev-lang/python-3.6.6 dev-lang/python-3.7.0
Created attachment 562840 [details] build.log build.log Failed to build these modules: _hashlib _ssl python-3.4.8-r1