[Python-Dev] Supported versions of OpenSSL (original) (raw)

Terry Reedy tjreedy at udel.edu
Mon Aug 29 19:48:46 EDT 2016

On 8/29/2016 5:20 PM, Christian Heimes wrote:

On 2016-08-29 23:00, Gregory P. Smith wrote:

Lets make 3.7 require a higher version. The common OSS OS distros of its time will be better prepared.

Especially is warned.

My multissl test script allows me to compile and test ssl.c and hashopenssl.c with multiple versions of OpenSSL and LibreSSL in less than a minute. For 3.6 I have verified source compatibility with 0.9.8zc (maybe even older) up to 1.1.0.

My argument with MAL is about future features for 3.7. I'm not planning to require 1.0.2 APIs for 3.6 yet. This may change in case new security issues are found. I might clean up the ssl module and require 0.9.8zc+ during beta, though.

So, in 3.6, and maybe even 3.5.3, add a deprecation warning when OSSL < 1.0.2 is used.

-- Terry Jan Reedy

More information about the Python-Dev mailing list