OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1

[tiran]

BPO	43799
Nosy	@tiran, @miss-islington, @native-api
PRs	bpo-43799: OpenSSL 3.0.0: declare OPENSSL_API_COMPAT 1.1.1 (GH-25329) #25329 [3.9] bpo-43799: OpenSSL 3.0.0: declare OPENSSL_API_COMPAT 1.1.1 (GH-25329) #25382 [3.8] bpo-43799: OpenSSL 3.0.0: declare OPENSSL_API_COMPAT 1.1.1 (GH-25329) (GH-25383) #25383 bpo-43799: Also define SSLv3_method() (GH-25481) #25481

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2021-04-13.07:09:39.517>
created_at = <Date 2021-04-10.09:34:20.941>
labels = ['expert-SSL', 'type-bug', '3.8', '3.9', '3.10']
title = 'OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1'
updated_at = <Date 2021-12-04.03:45:20.537>
user = 'https://github.com/tiran'

bugs.python.org fields:

activity = <Date 2021-12-04.03:45:20.537>
actor = 'ivan.pozdeev.gm'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2021-04-13.07:09:39.517>
closer = 'christian.heimes'
components = ['SSL']
creation = <Date 2021-04-10.09:34:20.941>
creator = 'christian.heimes'
dependencies = []
files = []
hgrepos = []
issue_num = 43799
keywords = ['patch']
message_count = 7.0
messages = ['390706', '390839', '390926', '390927', '390930', '391447', '407631']
nosy_count = 3.0
nosy_names = ['christian.heimes', 'miss-islington', 'ivan.pozdeev.gm']
pr_nums = ['25329', '25382', '25383', '25481']
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'behavior'
url = 'https://bugs.python.org/issue43799'
versions = ['Python 3.8', 'Python 3.9', 'Python 3.10']

[tiran]

OpenSSL 1.1 introduced the macro OPENSSL_API_COMPAT to select which APIs are exposed and which deprecation warnings are shown. https://www.openssl.org/docs/manmaster/man7/OPENSSL_API_COMPAT.html

"#define OPENSSL_API_COMPAT 0x10101000L" suppresses warnings for APIs that are available in 1.1.1 and deprecated in 3.0.0.

[tiran]

OpenSSL 1.0.2, 1.1.0, 1.1.1 and 3.0.0 behave slightly differently. For example I'm still getting a warning with 1.1.0. Only 3.0.0 supports OPENSSL_NO_DEPRECATED.

After multiple failed attempts I decided to set the API level to 1.1.1 and define the three TLSv*_method() functions explicitly. It's not the most elegant approach but it works. The symbols are available unless OPENSSL_NO_TLS*_METHOD is defined.

[tiran]

New changeset a483388 by Christian Heimes in branch 'master':
bpo-43799: OpenSSL 3.0.0: declare OPENSSL_API_COMPAT 1.1.1 (GH-25329)
a483388