[Bug 2012551] [NEW] Please build python >= 3.10 with --with-ssl-default-suites=openssl

[Ross Vandegrift]

Public bug reported:

Hello,

Starting in python3.10, python comes with it's own cipher list and TLS
version requirements.  As a result, changing the security leve in
openssl.cnf is not effective for python apps.

This was addressed for Debian in https://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=1026802 - --with-ssl-default-suites=openssl was
added in 3.11.2-2.  It'd be nice to have the same change in Ubuntu - and
to backport it for python 3.10 in 22.04LTS.

Thanks,
Ross

** Affects: python3-defaults (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to python3-defaults in Ubuntu.
https://bugs.launchpad.net/bugs/2012551

Title:
  Please build python >= 3.10 with --with-ssl-default-suites=openssl

Status in python3-defaults package in Ubuntu:
  New

Bug description:
  Hello,

  Starting in python3.10, python comes with it's own cipher list and TLS
  version requirements.  As a result, changing the security leve in
  openssl.cnf is not effective for python apps.

  This was addressed for Debian in https://bugs.debian.org/cgi-
  bin/bugreport.cgi?bug=1026802 - --with-ssl-default-suites=openssl was
  added in 3.11.2-2.  It'd be nice to have the same change in Ubuntu -
  and to backport it for python 3.10 in 22.04LTS.

  Thanks,
  Ross

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python3-defaults/+bug/2012551/+subscriptions