3.10 openssl rebuild#221
Merged
Merged
Conversation
This reverts commit 028301b.
ELundby45
force-pushed
the
3.10/debug-openssl
branch
from
e664e56 to
0bc96a6
Compare
JamesRobertsonGames
approved these changes
Jun 11, 2026
There was a problem hiding this comment.
Approved! Good work getting this into the test script like you did, we'll hopefully see a breaking change coming 👍
(minor point about this is that it's not ideal to rely on an external network call on CI, but I think we'd rather deal with that in the future rather than an SSL breakage)
ifitchet
approved these changes
Jun 11, 2026
ifitchet
left a comment
ifitchet
left a comment
There was a problem hiding this comment.
Nice find with the ctypes patch, too!
Talking to pypi.org during the test phase is a minor thing, right now.
Arguably, we could save the pypi.org cert in $RECIPE_DIR and use it directly.
This was referenced Jun 16, 2026
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Backport two upstream fixes so Python 3.10.20 builds and runs on win-64 with OpenSSL 3.5.7 and external libffi:
0028 — SSL DER EOF handling (cpython#100373): fixes ssl.create_default_context() / load_verify_locations(cadata=...) failing with [ASN1: NOT_ENOUGH_DATA] on Windows.
0029 — ctypes fielddesc init (cpython#29791): fixes _ctypes compile/link failures with external libffi DLL.
0015 — set USING_MALLOC_CLOSURE_DOT_C=1 (replace FFI_BUILDING) on _ctypes.vcxproj.