Upgrade installers to OpenSSL 1.0.2h

[alex]

BPO	26930
Nosy	@pfmoore, @ronaldoussoren, @larryhastings, @tjguk, @benjaminp, @ned-deily, @alex, @zware, @zooba
PRs	[Security][3.4] bpo-29572: Update macOS installer build to OpenSSL 1.0.2k #3447

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = <Date 2016-06-20.20:18:34.818>
created_at = <Date 2016-05-03.14:19:34.650>
labels = ['OS-windows', 'release-blocker']
title = 'Upgrade installers to OpenSSL 1.0.2h'
updated_at = <Date 2017-09-08.02:35:37.008>
user = 'https://github.com/alex'

bugs.python.org fields:

activity = <Date 2017-09-08.02:35:37.008>
actor = 'vstinner'
assignee = 'none'
closed = True
closed_date = <Date 2016-06-20.20:18:34.818>
closer = 'steve.dower'
components = ['Windows']
creation = <Date 2016-05-03.14:19:34.650>
creator = 'alex'
dependencies = []
files = []
hgrepos = []
issue_num = 26930
keywords = ['security_issue']
message_count = 9.0
messages = ['264731', '267353', '268633', '268634', '268635', '268638', '268925', '269047', '269343']
nosy_count = 10.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'larry', 'tim.golden', 'benjamin.peterson', 'ned.deily', 'alex', 'python-dev', 'zach.ware', 'steve.dower']
pr_nums = ['3447']
priority = 'release blocker'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = None
url = 'https://bugs.python.org/issue26930'
versions = ['Python 2.7', 'Python 3.5', 'Python 3.6']

[alex]

https://www.openssl.org/news/secadv/20160503.txt

[python-dev]

New changeset d858eadf2602 by Ned Deily in branch '2.7':
Issue bpo-26930: Update OS X 32-bit-only installer builds to use OpenSSL 1.0.2h.
https://hg.python.org/cpython/rev/d858eadf2602

New changeset 5462d455215a by Ned Deily in branch '3.5':
Issue bpo-26930: Update OS X 32-bit-only installer builds to use OpenSSL 1.0.2h.
https://hg.python.org/cpython/rev/5462d455215a

New changeset edf5ae3162ef by Ned Deily in branch 'default':
Issue bpo-26930: merge from 3.5
https://hg.python.org/cpython/rev/edf5ae3162ef

[python-dev]

New changeset 399d49d4acae by Zachary Ware in branch '2.7':
Issue bpo-26930: Update Windows build to OpenSSL 1.0.2h
https://hg.python.org/cpython/rev/399d49d4acae

New changeset 155e665428c6 by Zachary Ware in branch '3.5':
Issue bpo-26930: Update Windows build to OpenSSL 1.0.2h
https://hg.python.org/cpython/rev/155e665428c6

New changeset 3d726dbfca31 by Zachary Ware in branch 'default':
Issue bpo-26930: Merge with 3.5
https://hg.python.org/cpython/rev/3d726dbfca31

[zware]

Finally got this done.

Benjamin and Larry, it would probably be best if this made it into 2.7.12 and 3.5.2. Is there anything special I need to do to make that happen?

(My sincere apologies for not getting it done before the RCs.)

[larryhastings]

Yes, I'll accept this for 3.5.2 final.

Steve: do I need to do anything besides cherry-pick these revisions?

[zooba]

That should be enough from your side, but let me run a test build before you tag in case we need to fix anything.

[zooba]

Test build went fine, was validated in another thread.

[python-dev]

New changeset ad037bba60bb by Zachary Ware in branch '2.7':
Issue bpo-26930: Update Windows build to OpenSSL 1.0.2h
https://hg.python.org/cpython/rev/ad037bba60bb

[python-dev]

New changeset e1e5691d02d8 by Zachary Ware in branch '3.5':
Issue bpo-26930: Update Windows build to OpenSSL 1.0.2h
https://hg.python.org/cpython/rev/e1e5691d02d8