From: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Date: Sat, 11 Oct 2025 17:59:55 +0000 (+0200)
Subject: [3.14] gh-139929: fix incorrect OpenSSL version-based guard in `_ssl.c` (GH-139945... 
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=187588e67522b54429a05975396233ea2cf695a3;p=thirdparty%2FPython%2Fcpython.git

[3.14] gh-139929: fix incorrect OpenSSL version-based guard in `_ssl.c` (GH-139945) (#139964)

gh-139929: fix incorrect OpenSSL version-based guard in `_ssl.c` (GH-139945)

fix OpenSSL version-based guards
(cherry picked from commit cdd3eee7fc26538c8365dcbf2dd844ec7cdf7fb7)

Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
---

diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 6898d73b8ffb..051efce4cfaa 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -910,7 +910,7 @@ newPySSLSocket(PySSLContext *sslctx, PySocketSockObject *sock,
     }
 
     /* bpo43522 and OpenSSL < 1.1.1l: copy hostflags manually */
-#if OPENSSL_VERSION < 0x101010cf
+#if OPENSSL_VERSION_NUMBER < 0x101010cf
     X509_VERIFY_PARAM *ssl_verification_params = SSL_get0_param(self->ssl);
     X509_VERIFY_PARAM *ssl_ctx_verification_params = SSL_CTX_get0_param(ctx);