Skip to content

Cherry-pick an improved DER parser in _ssl.c from 3.12 onto 3.10 and 3.11 - #1147

Merged
jjhelmus merged 2 commits into
mainfrom
geofft/backport-der-parsing
Jun 10, 2026
Merged

jjhelmus merged 2 commits into
mainfrom
geofft/backport-der-parsing

Conversation

@geofft

@geofft geofft commented Jun 10, 2026

Copy link
Copy Markdown
Collaborator

This fixes the inability to load DER correctly with OpenSSL 3.5.7.

Cherry-pick an improved DER parser in 3.12 that is not sensitive to a
minor change in error message in the new OpenSSL version.
@jjhelmus

Copy link
Copy Markdown
Contributor

Should this patch be applied on Windows, e.g. in cpython-windows/build.py?

@geofft

geofft commented Jun 10, 2026

Copy link
Copy Markdown
Collaborator Author

That seems like a really good idea, yes...

I'm including the patch twice, once in cpython-unix and once in cpython-windows, to avoid thinking about symlinks or about .., but I can read the patch out of cpython-unix if that seems better.

@jjhelmus
jjhelmus merged commit a6b8a1c into main Jun 10, 2026
26 of 27 checks passed
@jjhelmus
jjhelmus deleted the geofft/backport-der-parsing branch June 10, 2026 23:58
@jjhelmus

Copy link
Copy Markdown
Contributor

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants