]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Thu, 18 Mar 2021 22:41:11 +0000 (15:41 -0700)
committerGitHub <noreply@github.com>
Thu, 18 Mar 2021 22:41:11 +0000 (15:41 -0700)
commit50511677f59464e612cfef0cd0e139fe07e87737
tree62354c1d24de79f48d486d0bb1197e5ef69df36a
parent9bdb5802361016704fb3434369741cc6c5e08f02
bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)

Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.

See:
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit f6c6b5821bff815bdc810de53992fd1fbdb2edd4)

Co-authored-by: Christian Heimes <christian@python.org>
.github/workflows/build.yml
Lib/test/test_ssl.py
Misc/NEWS.d/next/Tests/2021-03-18-10-34-42.bpo-41561.pDg4w-.rst [new file with mode: 0644]