OPENSSL_* flags not propagated to extensions during build

[BjrnPollex]

BPO	38577
Nosy	@ronaldoussoren, @tiran, @ned-deily

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2019-10-24.09:37:19.689>
created_at = <Date 2019-10-24.08:20:16.801>
labels = ['extension-modules', 'expert-SSL', '3.7', 'invalid', 'OS-mac']
title = 'OPENSSL_* flags not propagated to extensions during build'
updated_at = <Date 2019-10-24.09:37:19.688>
user = 'https://bugs.python.org/BjrnPollex'

bugs.python.org fields:

activity = <Date 2019-10-24.09:37:19.688>
actor = 'Bj\xc3\xb6rn Pollex'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2019-10-24.09:37:19.689>
closer = 'Bj\xc3\xb6rn Pollex'
components = ['Extension Modules', 'macOS', 'SSL']
creation = <Date 2019-10-24.08:20:16.801>
creator = 'Bj\xc3\xb6rn Pollex'
dependencies = []
files = []
hgrepos = []
issue_num = 38577
keywords = []
message_count = 3.0
messages = ['355299', '355313', '355314']
nosy_count = 4.0
nosy_names = ['ronaldoussoren', 'christian.heimes', 'ned.deily', 'Bj\xc3\xb6rn Pollex']
pr_nums = []
priority = 'normal'
resolution = 'not a bug'
stage = 'resolved'
status = 'closed'
superseder = None
type = None
url = 'https://bugs.python.org/issue38577'
versions = ['Python 3.7']

[BjrnPollex]

When building Python 3.7.2 using pyenv on MacOS, it will use --with-openssl to configure OpenSSL. With that option, the compiler options for OpenSSL will be passed via OPENSSL_* variables, rather than normal compiler flags (e.g. OPENSSL_LDFLAGS vs. LDFLAGS). When compiling an extension, these flags will not be propagated by distutils, and so an extension that depends on OpenSSL fails to compile.

I'm not sure what the expected behavior here is. Should the package handle this by querying sysconfig directly in setup.py? Or should this be handled automatically by distutils?

Specifically, I ran into this issue when trying to install mysqlclient-python (https://github.com/PyMySQL/mysqlclient-python).

[tiran]

'--with-openssl' purpose is to override the OpenSSL location for Python's internal _ssl and _hashlib module. It is not designed to interfere with 3rd party extensions that are built with distutils or setuptools.

It is the decision of a 3rd party package how it wants to handle these extra flags -- or if it is able to use them at all. In case of PyMySQL you must use the same shared libraries as libmysqlclient. You cannot use a different OpenSSL ABIs, APIs, or shared libraries for PyMySQL and libmysqlclient.

[BjrnPollex]

Thanks for the response, that clarifies it! In that case this issue is invalid.