Issue 14543: Upgrade OpenSSL on Windows to 0.9.8u (original) (raw)

Created on 2012-04-10 23:17 by dino.viehland, last changed 2022-04-11 14:57 by admin. This issue is now closed.

Messages (6)
msg157995 - (view)	Author: Dino Viehland (dino.viehland) *	Date: 2012-04-10 23:17
OpenSSL has had many fixes since the 0.9.8l version, and in particular there is one issue which prevents it from connecting with SSL with a client certificate: the end result is the SSL connection hangs or times out. Updating the OpenSSL version will fix this and enable better compatibility across platforms. I've attached my repro but if you want to try it you'll need a different server + private key pair to authenticate with. I've also confirmed re-building Python with 0.9.8m fixes the problem and Python currently ships with 0.9.8l.
msg157996 - (view)	Author: STINNER Victor (vstinner) *	Date: 2012-04-10 23:20
Why not upgrading to OpenSSL 1.0, at least for Python 3.3?
msg157997 - (view)	Author: Antoine Pitrou (pitrou) *	Date: 2012-04-10 23:31
Well, 3.3 already links with openssl-1.0.0a. However, updating to the latest 1.0.x would probably be good.
msg157998 - (view)	Author: Dino Viehland (dino.viehland) *	Date: 2012-04-10 23:38
A 1.0 version would be fine w/ me (I tested it with one of those and it worked as well) - I was just thinking a bug fix release might want to stick w/ a bug fix release of OpenSSL too.
msg157999 - (view)	Author: Antoine Pitrou (pitrou) *	Date: 2012-04-10 23:43
> A 1.0 version would be fine w/ me (I tested it with one of those and > it worked as well) - I was just thinking a bug fix release might want > to stick w/ a bug fix release of OpenSSL too. Agreed, I was replying to Victor about 3.3.
msg161051 - (view)	Author: Martin v. Löwis (loewis) *	Date: 2012-05-18 14:37
I have now upgraded OpenSSL to 0.9.8x for 2.7, to 1.0.0j for 3.2, and to 1.0.1c for 3.3.