Upgrade installers to OpenSSL 1.1.0g and 1.0.2n

[zooba]

BPO	31392
Nosy	@pfmoore, @ronaldoussoren, @vstinner, @tiran, @tjguk, @ned-deily, @zware, @zooba
PRs	bpo-31392: Update SSL build for 1.1.0 #3448 [3.6] bpo-31400: Improve SSL error handling on Windows (GH-3463) #3466 bpo-31392: Update macOS installer to use OpenSSL 1.0.2m #4715 [3.6] bpo-31392: Update macOS installer to use OpenSSL 1.0.2m (GH-4715) #4716

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = <Date 2018-09-14.18:45:58.413>
created_at = <Date 2017-09-08.02:52:49.065>
labels = ['OS-mac', 'expert-SSL', 'type-feature', '3.7', 'OS-windows']
title = 'Upgrade installers to OpenSSL 1.1.0g and 1.0.2n'
updated_at = <Date 2018-09-14.18:45:58.412>
user = 'https://github.com/zooba'

bugs.python.org fields:

activity = <Date 2018-09-14.18:45:58.412>
actor = 'ned.deily'
assignee = 'none'
closed = True
closed_date = <Date 2018-09-14.18:45:58.413>
closer = 'ned.deily'
components = ['macOS', 'Windows', 'SSL']
creation = <Date 2017-09-08.02:52:49.065>
creator = 'steve.dower'
dependencies = []
files = []
hgrepos = []
issue_num = 31392
keywords = ['patch']
message_count = 12.0
messages = ['301673', '301744', '301770', '301776', '302160', '302161', '307519', '307627', '307633', '307635', '307917', '325383']
nosy_count = 8.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'vstinner', 'christian.heimes', 'tim.golden', 'ned.deily', 'zach.ware', 'steve.dower']
pr_nums = ['3448', '3466', '4715', '4716']
priority = 'normal'
resolution = 'out of date'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'enhancement'
url = 'https://bugs.python.org/issue31392'
versions = ['Python 3.6', 'Python 3.7']

[zooba]

As per usual

[tiran]

New changeset e6eb48c by Christian Heimes (Steve Dower) in branch 'master':
bpo-31400: Improve SSL error handling on Windows (bpo-3463)
e6eb48c

[zooba]

New changeset b84bcc4 by Steve Dower in branch 'master':
bpo-31392: Update SSL build for 1.1.0 (bpo-3448)
b84bcc4

[tiran]

New changeset 16f16db by Christian Heimes in branch '3.6':
[3.6] bpo-31400: Improve SSL error handling on Windows (GH-3463) (bpo-3466)
16f16db

[tiran]

Ned, can you take care of macOS? Victor noted that master still builds with 1.0.2k.

[vstinner]

FYI I wrote a script to get the version of all library copies embedded in CPython:
https://github.com/haypo/misc/blob/master/cpython/external_versions.py

This is how I noticed the OpenSSL version inconsistency.

[ned-deily]

1.1.0g and 1.0.2m are out as of 2017-11-02 so both Windows and Mac installer builds for 3.7 and 3.6 should be updated. (I'll take care of the Mac ones.)

[ned-deily]

New changeset 24e0469 by Ned Deily in branch 'master':
bpo-31392: Update macOS installer to use OpenSSL 1.0.2m (bpo-4715)
24e0469

[ned-deily]

New changeset 0bec5e1 by Ned Deily (Miss Islington (bot)) in branch '3.6':
[3.6] bpo-31392: Update macOS installer to use OpenSSL 1.0.2m (GH-4715) (bpo-4716)
0bec5e1

[ned-deily]

Updated the 3.7.0a3 and 3.6.4 macOS installer builds to 1.0.2m; I'll get 3.7.x to 1.1.0 before 3.7.0a4.

[ned-deily]

And now 1.0.2n is out. I'm not sure how vulnerable Python is to the main problem fixed (see https://www.openssl.org/news/secadv/20171207.txt) which only impacts 1.0.2.x but I'd be willing to pull it into 3.6.4 final for the Windows and macOS installers.

[ned-deily]

Sorry, this should have been closed a while back. We're now on to 1.0.2p for 3.6.7 and 1.1.0i for 3.7.1.