OpenSSL 1.1.1l is released

[ned-deily]

BPO	45007
Nosy	@pfmoore, @ronaldoussoren, @tiran, @tjguk, @ned-deily, @ambv, @zware, @zooba, @miss-islington, @erlend-aasland
PRs	bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI #28009 [3.10] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) #28039 [3.9] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) #28040 [3.8] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) #28041 bpo-45007: Update multissl to openssl 1.1.1l as well #28044 bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l. #28051 [3.10] bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l. (GH-28051) #28055 [3.9] bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l. (GH-28051) #28056 [3.8] bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l (GH-28051) #28059 [3.10] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) #28061 [3.9] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) #28062 [3.8] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) #28063

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2021-08-30.13:21:44.690>
created_at = <Date 2021-08-26.03:34:24.748>
labels = ['OS-mac', 'expert-SSL', '3.8', '3.9', '3.10', '3.11', 'OS-windows']
title = 'OpenSSL 1.1.1l is released'
updated_at = <Date 2021-08-30.13:21:44.687>
user = 'https://github.com/ned-deily'

bugs.python.org fields:

activity = <Date 2021-08-30.13:21:44.687>
actor = 'lukasz.langa'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2021-08-30.13:21:44.690>
closer = 'lukasz.langa'
components = ['macOS', 'Windows', 'SSL']
creation = <Date 2021-08-26.03:34:24.748>
creator = 'ned.deily'
dependencies = []
files = []
hgrepos = []
issue_num = 45007
keywords = ['patch']
message_count = 13.0
messages = ['400307', '400377', '400536', '400544', '400545', '400551', '400584', '400589', '400591', '400592', '400593', '400596', '400598']
nosy_count = 10.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'christian.heimes', 'tim.golden', 'ned.deily', 'lukasz.langa', 'zach.ware', 'steve.dower', 'miss-islington', 'erlendaasland']
pr_nums = ['28009', '28039', '28040', '28041', '28044', '28051', '28055', '28056', '28059', '28061', '28062', '28063']
priority = 'high'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = None
url = 'https://bugs.python.org/issue45007'
versions = ['Python 3.8', 'Python 3.9', 'Python 3.10', 'Python 3.11']

[ned-deily]

OpenSSL 1.1.1l was released on 2021-08-24 so the Windows build and macOS binary installers should be updated to it.

https://www.openssl.org/source/

However, it appears that 1.1.1l introduced a build failure on older macOS systems that would affect some python.org macOS installer builds so we should wait for an official fix before updating the macOS builds. I will take care of that part.

openssl/openssl#16407

[zooba]

The new build and tags for Windows are up.

[ambv]

New changeset d3bdbbf by Steve Dower in branch 'main':
bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009)
d3bdbbf

[ambv]

I backported #72196 to 3.8 inclusive, given that 3.7 and 3.6 currently list older versions than 1.1.1k.

[ambv]

New changeset 5720bca by Łukasz Langa in branch '3.9':
[3.9] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28040)
5720bca

[ambv]

New changeset 803c607 by Łukasz Langa in branch '3.8':
[3.8] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28041)
803c607

[ambv]

New changeset 1f89e51 by Miss Islington (bot) in branch '3.8':
bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l (GH-28051) (GH-28059)
1f89e51

[miss-islington]

New changeset d6cb5dd by Łukasz Langa in branch 'main':
bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044)
d6cb5dd

[miss-islington]

New changeset dc46f4c by Miss Islington (bot) in branch '3.10':
bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044)
dc46f4c

[ambv]

New changeset 576803d by Christian Heimes in branch '3.9':
[3.9] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) (GH-28062)
576803d

[ambv]

New changeset 8371290 by Christian Heimes in branch '3.8':
[3.8] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) (GH-28063)
8371290

[ambv]

New changeset 52bdda5 by Łukasz Langa in branch '3.10':
[3.10] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28039)
52bdda5

[ambv]

CI as well as Windows and macOS installers upgraded to use 1.1.1l all the way to 3.8 inclusive. Closing.

Thanks all! ✨ 🍰 ✨