[3.6] bpo-32947: Fixes for TLS 1.3 and OpenSSL 1.1.1 (GH-6976) by tiran · Pull Request #8760 · python/cpython (original) (raw)
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
Conversation3 Commits1 Checks0 Files changed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.Learn more about bidirectional Unicode characters
[ Show hidden characters]({{ revealButtonHref }})
Change TLS 1.3 cipher suite settings for compatibility with OpenSSL
1.1.1-pre6 and newer. OpenSSL 1.1.1 will have TLS 1.3 cipers enabled by
default.
Also update multissltests to test with latest OpenSSL.
Signed-off-by: Christian Heimes christian@python.org
https://bugs.python.org/issue32947
bpo-32947: Fixes for TLS 1.3 and OpenSSL 1.1.1 (GH-5663) [3.6] bpo-32947: Fixes for TLS 1.3 and OpenSSL 1.1.1 (GH-5663)
[3.6] bpo-32947: Fixes for TLS 1.3 and OpenSSL 1.1.1 (GH-5663) [3.6] bpo-32947: Fixes for TLS 1.3 and OpenSSL 1.1.1 (GH-6976)
Change TLS 1.3 cipher suite settings for compatibility with OpenSSL 1.1.1-pre6 and newer. OpenSSL 1.1.1 will have TLS 1.3 cipers enabled by default.
Also update multissltests to test with latest OpenSSL.
Signed-off-by: Christian Heimes christian@python.org
Thanks @tiran for the PR 🌮🎉.. I'm working now to backport this PR to: 2.7.
🐍🍒⛏🤖
Sorry, @tiran, I could not cleanly backport this to 2.7 due to a conflict.
Please backport using cherry_picker on command line.cherry_picker 3e630c541b35c96bfe5619165255e559f577ee71 2.7
tiran added a commit to tiran/cpython that referenced this pull request
Change TLS 1.3 cipher suite settings for compatibility with OpenSSL 1.1.1-pre6 and newer. OpenSSL 1.1.1 will have TLS 1.3 cipers enabled by default.
Also update multissltests to test with latest OpenSSL.
Signed-off-by: Christian Heimes christian@python.org. (cherry picked from commit 3e630c5)
Co-authored-by: Christian Heimes christian@python.org
stratakis pushed a commit to stratakis/cpython that referenced this pull request
Change TLS 1.3 cipher suite settings for compatibility with OpenSSL 1.1.1-pre6 and newer. OpenSSL 1.1.1 will have TLS 1.3 cipers enabled by default.
Also update multissltests to test with latest OpenSSL.
Signed-off-by: Christian Heimes christian@python.org. (cherry picked from commit 3e630c5)
Co-authored-by: Christian Heimes christian@python.org
vstinner pushed a commit that referenced this pull request
Change TLS 1.3 cipher suite settings for compatibility with OpenSSL 1.1.1-pre6 and newer. OpenSSL 1.1.1 will have TLS 1.3 cipers enabled by default.
Also update multissltests to test with latest OpenSSL.
Signed-off-by: Christian Heimes christian@python.org. (cherry picked from commit 3e630c5) Co-authored-by: Christian Heimes christian@python.org