test_ssl and test_urllib2_localnet failing with new OpenSSL

[mscastanho]

BPO	39787
Nosy	@vstinner, @tiran, @mscastanho
Superseder	bpo-40018: test_ssl fails with OpenSSL 1.1.1e
Files	test-output.txt

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2020-03-23.14:52:51.999>
created_at = <Date 2020-02-28.20:02:38.893>
labels = ['expert-SSL', 'type-bug', '3.8', '3.9', '3.7', 'tests']
title = 'test_ssl and test_urllib2_localnet failing with new OpenSSL'
updated_at = <Date 2020-03-23.14:52:51.997>
user = 'https://github.com/mscastanho'

bugs.python.org fields:

activity = <Date 2020-03-23.14:52:51.997>
actor = 'vstinner'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2020-03-23.14:52:51.999>
closer = 'vstinner'
components = ['Tests', 'SSL']
creation = <Date 2020-02-28.20:02:38.893>
creator = 'mscastanho'
dependencies = []
files = ['48931']
hgrepos = []
issue_num = 39787
keywords = []
message_count = 2.0
messages = ['362915', '364853']
nosy_count = 3.0
nosy_names = ['vstinner', 'christian.heimes', 'mscastanho']
pr_nums = []
priority = 'normal'
resolution = 'duplicate'
stage = 'resolved'
status = 'closed'
superseder = '40018'
type = 'behavior'
url = 'https://bugs.python.org/issue39787'
versions = ['Python 3.7', 'Python 3.8', 'Python 3.9']

[mscastanho]

test_ssl and test_urllib2_localnet are failing when Python is built against top-of-tree OpenSSL. I'm attaching the output of: regrtest.py test_ssl test_urllib2_localnet -W

The output is from a powerpc64le machine with Python 3.8.2+ (1bbb81b) and OpenSSL master (db943f43a60d1b).

A git bisect showed the problems started with the following OpenSSL commit:

commit db943f43a60d1b5b1277e4b5317e8f288e7a0a3a
Author: Matt Caswell <matt@openssl.org>
Date: Fri Jan 17 17:39:19 2020 +0000

Detect EOF while reading in libssl

If we hit an EOF while reading in libssl then we will report an error
back to the application (SSL_ERROR_SYSCALL) but errno will be 0. We add
an error to the stack (which means we instead return SSL_ERROR_SSL) and
therefore give a hint as to what went wrong.

Contains a partial fix for bpo-10880

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/10882)

This also looks similar to: https://bugs.python.org/issue28689

[vstinner]

Duplicate of bpo-40018.