Run GHA CI with multiple OpenSSL versions

[tiran]

BPO	43811
Nosy	@tiran, @miss-islington
PRs	bpo-43811: Test multiple OpenSSL versions on GHA #25360 [3.9] bpo-43811: Test multiple OpenSSL versions on GHA (GH-25360) #25391 [3.8] bpo-43811: Test multiple OpenSSL versions on GHA (GH-25360) #25392

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2021-04-19.20:10:18.774>
created_at = <Date 2021-04-12.08:38:07.789>
labels = ['expert-SSL', 'type-bug', '3.8', '3.9', '3.10', 'tests']
title = 'Run GHA CI with multiple OpenSSL versions'
updated_at = <Date 2021-04-19.20:10:18.773>
user = 'https://github.com/tiran'

bugs.python.org fields:

activity = <Date 2021-04-19.20:10:18.773>
actor = 'christian.heimes'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2021-04-19.20:10:18.774>
closer = 'christian.heimes'
components = ['Tests', 'SSL']
creation = <Date 2021-04-12.08:38:07.789>
creator = 'christian.heimes'
dependencies = []
files = []
hgrepos = []
issue_num = 43811
keywords = ['patch']
message_count = 6.0
messages = ['390825', '390830', '390932', '390980', '390989', '390992']
nosy_count = 2.0
nosy_names = ['christian.heimes', 'miss-islington']
pr_nums = ['25360', '25391', '25392']
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'behavior'
url = 'https://bugs.python.org/issue43811'
versions = ['Python 3.8', 'Python 3.9', 'Python 3.10']

[tiran]

CI only tests one OpenSSL version, but Python supports multiple versions of OpenSSL. OpenSSL 1.0.2, 1.1.0, 1.1.1, and 3.0.0 have different APIs and behave differently. We should run minimal tests with all major OpenSSL versions to ensure that Python compiles and works with supported versions.

This will slow down CI a bit. I figured out how to include ccache to speed up compilation a lot. With populated ccache configure + make takes less than 30 seconds instead of 90 seconds.

I also noticed that GHA action configuration compiles Python with custom OpenSSL but fails to set rpath / LD_LIBRARY_PATH. I think this means that we compile with custom OpenSSL but actual tests use OSS' OpenSSL libraries.