Ubuntu
python3.10 package

Please build python >= 3.10 with --with-ssl-default-suites=openssl

  1. Kinetic (22.10)
  2. Bug #2012551
Bug #2012551 reported by Ross Vandegrift
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python3.10 (Ubuntu)
Invalid
Undecided
Unassigned
Jammy
New
Undecided
Unassigned
Kinetic
New
Undecided
Unassigned

Bug Description

Hello,

Starting in python3.10, python comes with it's own cipher list and TLS version requirements. As a result, changing the security leve in openssl.cnf is not effective for python apps.

This was addressed for Debian in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026802 - --with-ssl-default-suites=openssl was added in 3.11.2-2. It'd be nice to have the same change in Ubuntu - and to backport it for python 3.10 in 22.04LTS.

Thanks,
Ross

Stefano Rivera (stefanor)
affects: python3-defaults (Ubuntu) → python3.10 (Ubuntu)
Changed in python3.10 (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.