pyOpenSSL in python 3

Originally reported by: Red_M (Bitbucket: Red_M, GitHub: Unknown)

---

Support for this would be great as people moving to python 3 from python 2 should be able to keep all of their SSL code from 2.

---

• Bitbucket: https://bitbucket.org/cherrypy/cherrypy/issue/1399

[Red-M]

still nothing on this?

[Red-M]

So I noticed that you guys changed how wsgiserver was being called for py2 and py3.
Can I get any idea if this is going to be added?
I've tried compatibility shims for this in py3 however I have been unsuccessful.
If I've submitted this in the wrong format, can you please let me know?

Just being left with zero response for months on end is a little unsettling even more so with py2 being sunset soon.

[jaraco]

Hi Red-M. Sorry, no still nothing. If you'd like to put together a patch to make pyOpenSSL work on Python 3, that would be great.

[Red-M]

I'll try to write some patches for this as this affects some of my own projects and affects my production.

[jaraco]

One thing I notice is that the pyopenssl support relies on the fact that the makefile is a class that can be subclassed, but on Python 3, that functionality is provided as a factory function and not a class that can be subclassed, so that's something that'll be a major impediment to this effort.

[Red-M]

I've actually just recently found a performance bug with pyOpenSSL that was so bad that I've switched to the builtin and done my changes on top of that. In my testing the pyOpenSSL code was 23.5 times slower on just file transfers (256KB/s compared to 6MB/s). This was caused by something in that code causing a complete CPU core to be wasted on this task. If anyone wants the changes to implement SNI, NPN and good/better cipher suites I can link the commit I added in to my software.

…

On 10 January 2017 at 07:25, Jason R. Coombs ***@***.***> wrote: One thing I notice is that the pyopenssl support relies on the fact that the makefile is a class that can be subclassed, but on Python 3, that functionality is provided as a factory function and not a class that can be subclassed, so that's something that'll be a major impediment to this effort. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1399 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABZoEYGq0Nboad1yAyx-FsZO2BDuhlOMks5rQqXigaJpZM4Ic6Mx> .