Update to OpenSSL 1.1.1n

[tiran]

BPO	47024
Nosy	@pfmoore, @ronaldoussoren, @tiran, @tjguk, @ned-deily, @ambv, @zware, @zooba, @pablogsal
PRs	bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) #31895 [3.7] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. #31911 [3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. #31912 [3.10] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (GH-31916) #31916 [3.9] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) #31917

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2022-03-15.20:54:24.217>
created_at = <Date 2022-03-15.08:28:31.480>
labels = ['OS-mac', '3.7', '3.8', '3.9', 'build', 'type-security', '3.10', '3.11', 'OS-windows']
title = 'Update to OpenSSL 1.1.1n'
updated_at = <Date 2022-03-15.20:54:24.216>
user = 'https://github.com/tiran'

bugs.python.org fields:

activity = <Date 2022-03-15.20:54:24.216>
actor = 'christian.heimes'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2022-03-15.20:54:24.217>
closer = 'christian.heimes'
components = ['Build', 'macOS', 'Windows']
creation = <Date 2022-03-15.08:28:31.480>
creator = 'christian.heimes'
dependencies = []
files = []
hgrepos = []
issue_num = 47024
keywords = ['patch']
message_count = 6.0
messages = ['415226', '415281', '415290', '415292', '415293', '415296']
nosy_count = 9.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'christian.heimes', 'tim.golden', 'ned.deily', 'lukasz.langa', 'zach.ware', 'steve.dower', 'pablogsal']
pr_nums = ['31895', '31911', '31912', '31916', '31917']
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'security'
url = 'https://bugs.python.org/issue47024'
versions = ['Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10', 'Python 3.11']

[tiran]

Update OpenSSL to 1.1.1n and test with OpenSSL 3.0.2. The update will become available later today and features a HIGH security bug, https://mta.openssl.org/pipermail/openssl-announce/2022-March/000216.html

$ sed -i 's/1.1.1m/1.1.1n/g' Tools/ssl/multissltests.py .azure-pipelines/pr.yml .azure-pipelines/ci.yml .github/workflows/build.yml PCbuild/python.props PCbuild/get_externals.bat Mac/BuildScript/build-installer.py
$ sed -i 's/3.0.1/3.0.2/g' Tools/ssl/multissltests.py .github/workflows/build.yml

[ned-deily]

New changeset b620446 by Ned Deily in branch '3.7':
bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31911)
b620446

[tiran]

New changeset af0a50d by Christian Heimes in branch 'main':
bpo-47024: Update OpenSSL to 1.1.1n (GH-31895)
af0a50d

[tiran]

New changeset a59ac1e by Christian Heimes in branch '3.10':
[3.10] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (GH-31916)
a59ac1e

[tiran]

New changeset 513911b by Christian Heimes in branch '3.9':
[3.9] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (bpo-31917)
513911b

[ambv]

New changeset e8b72fc by Ned Deily in branch '3.8':
[3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31912)
e8b72fc