Due to https://fedoraproject.org/wiki/Changes/RemoveOpensslCompat we will need to port Python 3.6 to OpenSSL 3. This is a tracking Bugzilla for the effort.
Created attachment 2007224 [details] forward port of python2.7's openssl-3 patch I took a stab at forward-porting the patch from the python2.7 package. It builds and passes many of the tests, but fails on 5 in test_ssl. Hopefully that's still helpful for someone else to take this the rest of the way...
Here are the failures with that patch (and changing the spec to BR plain openssl-devel): ====================================================================== ERROR: test_load_cert_chain (test.test_ssl.ContextTests) ---------------------------------------------------------------------- ValueError: password cannot be longer than 1024 bytes The above exception was the direct cause of the following exception: Traceback (most recent call last): File "/builddir/build/BUILD/Python-3.6.15/Lib/test/test_ssl.py", line 1118, in test_load_cert_chain ctx.load_cert_chain(CERTFILE_PROTECTED, password=getpass_huge) SystemError: PyEval_EvalFrameEx returned a result with an error set ====================================================================== ERROR: test_subclass (test.test_ssl.SSLErrorTests) ---------------------------------------------------------------------- Traceback (most recent call last): File "/builddir/build/BUILD/Python-3.6.15/Lib/test/test_ssl.py", line 1494, in test_subclass c.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1033, in do_handshake self._sslobj.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 645, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL] internal error (_ssl.c:883) ====================================================================== ERROR: test_nonblocking_send (test.test_ssl.ThreadedTests) ---------------------------------------------------------------------- Traceback (most recent call last): File "/builddir/build/BUILD/Python-3.6.15/Lib/test/test_ssl.py", line 3099, in test_nonblocking_send s.connect((HOST, server.port)) File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1065, in connect self._real_connect(addr, False) File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1056, in _real_connect self.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1033, in do_handshake self._sslobj.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 645, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL] internal error (_ssl.c:883) ====================================================================== ERROR: test_session (test.test_ssl.ThreadedTests) ---------------------------------------------------------------------- Traceback (most recent call last): File "/builddir/build/BUILD/Python-3.6.15/Lib/test/test_ssl.py", line 3662, in test_session stats = server_params_test(client_context, server_context) File "/builddir/build/BUILD/Python-3.6.15/Lib/test/test_ssl.py", line 2324, in server_params_test s.connect((HOST, server.port)) File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1065, in connect self._real_connect(addr, False) File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1056, in _real_connect self.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1033, in do_handshake self._sslobj.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 645, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL] internal error (_ssl.c:883) ====================================================================== ERROR: test_shared_ciphers (test.test_ssl.ThreadedTests) ---------------------------------------------------------------------- Traceback (most recent call last): File "/builddir/build/BUILD/Python-3.6.15/Lib/test/test_ssl.py", line 3615, in test_shared_ciphers stats = server_params_test(client_context, server_context) File "/builddir/build/BUILD/Python-3.6.15/Lib/test/test_ssl.py", line 2324, in server_params_test s.connect((HOST, server.port)) File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1065, in connect self._real_connect(addr, False) File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1056, in _real_connect self.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 1033, in do_handshake self._sslobj.do_handshake() File "/builddir/build/BUILD/Python-3.6.15/Lib/ssl.py", line 645, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL] internal error (_ssl.c:883) ---------------------------------------------------------------------- Ran 135 tests in 2.253s FAILED (errors=5, skipped=11) test test_ssl failed
Thank you.
PR: https://src.fedoraproject.org/rpms/python3.6/pull-request/95
FEDORA-2024-627f86cea8 (python3.6-3.6.15-29.fc40) has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2024-627f86cea8
FEDORA-2024-d33286ec1b (python3.6-3.6.15-29.fc41) has been submitted as an update to Fedora 41. https://bodhi.fedoraproject.org/updates/FEDORA-2024-d33286ec1b
FEDORA-2024-d33286ec1b (python3.6-3.6.15-29.fc41) has been pushed to the Fedora 41 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2024-627f86cea8 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-627f86cea8` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-627f86cea8 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2024-627f86cea8 (python3.6-3.6.15-29.fc40) has been pushed to the Fedora 40 stable repository. If problem still persists, please make note of it in this bug report.