]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Thu, 18 Mar 2021 22:31:34 +0000 (15:31 -0700)
committerGitHub <noreply@github.com>
Thu, 18 Mar 2021 22:31:34 +0000 (15:31 -0700)
commit3365e684a83a6bc9e2e2198dca54b42711bd3c90
treee3e84f61ecaefb26264f968327abf2a9abeb8059
parent4cc9e2348b6a8430dc21cb7ff8c9850d16f772f9
bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)

Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.

See:
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit f6c6b5821bff815bdc810de53992fd1fbdb2edd4)

Co-authored-by: Christian Heimes <christian@python.org>
.github/workflows/build.yml
Lib/test/test_ssl.py
Misc/NEWS.d/next/Tests/2021-03-18-10-34-42.bpo-41561.pDg4w-.rst [new file with mode: 0644]