mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-08-03 16:39:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

bpo-40457: Support OpenSSL without TLS 1.0/1.1 (GH-19862)

Browse source 
OpenSSL can be build without support for TLS 1.0 and 1.1. The ssl module
now correctly adheres to OPENSSL_NO_TLS1 and OPENSSL_NO_TLS1_1 flags.

Also update multissltest to test with latest OpenSSL and LibreSSL
releases.

Signed-off-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: @tiran
This commit is contained in:
Christian Heimes 2020-05-16 03:33:05 +02:00 • committed by GitHub
parent 6b6092f533
commit 6e8cda91d9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 34 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

9
Tools/ssl/multissltests.py
View file

@ -43,20 +43,21 @@ import tarfile
log = logging.getLogger("multissl")
OPENSSL_OLD_VERSIONS = [
"1.0.2u",
"1.1.0l",
]
OPENSSL_RECENT_VERSIONS = [
"1.0.2u",
"1.1.0l",
"1.1.1g",
# "3.0.0-alpha2"
]
LIBRESSL_OLD_VERSIONS = [
"2.9.2",
]
LIBRESSL_RECENT_VERSIONS = [
"2.9.2",
"3.1.0",
]
# store files in ../multissl
@ -80,7 +81,7 @@ parser.add_argument(
parser.add_argument(
'--disable-ancient',
action='store_true',
help="Don't test OpenSSL < 1.0.2 and LibreSSL < 2.5.3.",
help="Don't test OpenSSL and LibreSSL versions without upstream support",
)
parser.add_argument(
'--openssl',