Upgrade windows builds to use OpenSSL 1.0.2c

[alex]

BPO	24432
Nosy	@pfmoore, @pitrou, @larryhastings, @giampaolo, @tiran, @tjguk, @benjaminp, @ned-deily, @alex, @bitdancer, @zware, @zooba, @dstufft

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/zooba'
closed_at = <Date 2015-07-03.22:28:01.834>
created_at = <Date 2015-06-11.15:05:25.361>
labels = ['library', 'release-blocker']
title = 'Upgrade windows builds to use OpenSSL 1.0.2c'
updated_at = <Date 2015-07-04.06:47:41.096>
user = 'https://github.com/alex'

bugs.python.org fields:

activity = <Date 2015-07-04.06:47:41.096>
actor = 'python-dev'
assignee = 'steve.dower'
closed = True
closed_date = <Date 2015-07-03.22:28:01.834>
closer = 'steve.dower'
components = ['Library (Lib)']
creation = <Date 2015-06-11.15:05:25.361>
creator = 'alex'
dependencies = []
files = []
hgrepos = []
issue_num = 24432
keywords = ['security_issue']
message_count = 29.0
messages = ['245173', '245178', '245283', '246116', '246133', '246136', '246143', '246172', '246182', '246185', '246189', '246190', '246195', '246205', '246209', '246210', '246211', '246212', '246213', '246214', '246215', '246216', '246221', '246222', '246224', '246225', '246227', '246228', '246240']
nosy_count = 15.0
nosy_names = ['paul.moore', 'janssen', 'pitrou', 'larry', 'giampaolo.rodola', 'christian.heimes', 'tim.golden', 'benjamin.peterson', 'ned.deily', 'alex', 'r.david.murray', 'python-dev', 'zach.ware', 'steve.dower', 'dstufft']
pr_nums = []
priority = 'release blocker'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = None
url = 'https://bugs.python.org/issue24432'
versions = ['Python 2.7', 'Python 3.4', 'Python 3.5', 'Python 3.6']

[alex]

https://www.openssl.org/news/secadv_20150611.txt

[ned-deily]

Marking as release blocker for 3.5.0

[ned-deily]

Make that OpenSSL 1.0.2c now.

[larryhastings]

Steve?

[zooba]

I'll give it a shot tomorrow. Haven't done it before (not even sure I have the svn.p.o permissions). Do I still need Perl for this?

[zware]

Yes, you'll need Perl, NASM, and svn on PATH.

I tried to send you an email about this a week or two ago, did I not get it
sent or did it go awry?

[tjguk]

Zach, is there a write-up in the devguide for how to do this? And/or
could you send me the same email, please?

[zware]

Not yet and yes :)

[zooba]

There was an email, though I don't remember whether it was a detailed one.

I'll take notes as I work through it and write something up or contribute them to whoever is writing.

[zooba]

I assume we use svn+ssh:// for this? I can't ssh into svn.python.org with my usual key, so I'm guessing it needs to be set up on there.

Who is best to contact about that?

[pitrou]

For SVN access, I think it's probably Martin or perhaps Benjamin. Apparently svn.python.org still lives on the old Europe-based infrastructure...

Perhaps it would be good to switch the externals repo to hg, actually?

[zware]

Antoine Pitrou added the comment:

For SVN access, I think it's probably Martin or perhaps Benjamin.

Benjamin was the one who set up my access.

Perhaps it would be good to switch the externals repo to hg, actually?

Moving away from svn.python.org has been on my to-figure-out list for
some time, but like instructions for the devguide, that hasn't
happened yet either.