]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.7] bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915) (GH...
authorChristian Heimes <christian@python.org>
Mon, 3 May 2021 19:58:38 +0000 (21:58 +0200)
committerGitHub <noreply@github.com>
Mon, 3 May 2021 19:58:38 +0000 (15:58 -0400)
commit64be96ae1f85ce6b3bca4328576cf62d73f77b2a
tree3ae9eb1d19c9e378f44edcdaeee0732a30a3c5b2
parent2f01c562be913004e1d46fc02705c51b81638d67
[3.7] bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915) (GH-24928)

Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.

See:
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit f6c6b5821bff815bdc810de53992fd1fbdb2edd4)

Co-authored-by: Christian Heimes <christian@python.org>
.github/workflows/build.yml
Lib/test/test_ssl.py
Misc/NEWS.d/next/Tests/2021-03-18-10-34-42.bpo-41561.pDg4w-.rst [new file with mode: 0644]