Skip to content

Only do seclevel workaround if seclevel greater than 1 #131736

Closed
@WillChilds-Klein

Description

@WillChilds-Klein

Feature or enhancement

Proposal:

We propose checking libssl's current security level before performing our ubuntu workaround in test_ssl.py, and skipping the workaround if it's unnecessary.

Due to backwards compatibility concerns around parsing short RSA keys, AWS-LC only supports SECLEVEL=0.

Has this already been discussed elsewhere?

I have already discussed this feature proposal on Discourse

Links to previous discussion of this feature:

This issue is very similar to a series of other test modifications discussed in

https://discuss.python.org/t/support-building-ssl-and-hashlib-modules-against-aws-lc/44505/13

Linked PRs

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions