Showing content from http://mail.python.org/pipermail/python-dev/attachments/20151119/a055b026/attachment.html below:
<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On 11 November 2015 at 10:47, Nick Coghlan <span dir="ltr"><<a href="mailto:ncoghlan@gmail.com" target="_blank">ncoghlan@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Our last discussion back in July seemed to show that folks either<br>
didn't care about the question (because they're using unmodified<br>
upstream versions so the PEP didn't affect them), or else thought the<br>
approach described in the PEP was reasonable, so I'm hoping the<br>
consequences of my mistake won't be too severe.<br></blockquote></div><div><br></div>RHEL
7.2 is out today, together with details of what we've now committed to supporting for certification verification configuration in the RHEL 7 system Python:
<a href="https://access.redhat.com/articles/2039753">https://access.redhat.com/articles/2039753</a><br><br></div><div class="gmail_extra">That article also describes the PEP 476 status across the different Python builds Red Hat supports, which I've summarised below.<br></div><div class="gmail_extra"><br><div class="gmail_extra">Versions with PEP 476 implemented:<br><br></div><div class="gmail_extra">* Python 3.4 SCL: cert verification always enabled by default<br></div><div class="gmail_extra">*
system Python in RHEL 7.2+: still off by default due to the
compatibility break, but with PEP 493's file based configuration setting to
enable it by default<br><br></div><div class="gmail_extra">Versions without PEP 476 implemented:<br><br></div><div class="gmail_extra">* Python 2.7 SCL<br></div><div class="gmail_extra"><div class="gmail_extra">* Python 3.3 SCL<br></div>* system Python in RHEL 7.1 and earlier<br></div><div class="gmail_extra">* system Python in all versions of RHEL 6<br><br>I assume that status of the Python 2.7 SCL will change at some point, but don't have an ETA or any technical details to share at this point.<br><br></div><div class="gmail_extra">The system Python versions in RHEL 5 and earlier didn't include the ssl module at all (since that was only added to the standard library in Python 2.6), so they're not affected by the concerns raised in PEP 476 in the first place.<br></div><br></div><div class="gmail_extra">Regards,<br></div><div class="gmail_extra">Nick.<br></div><div class="gmail_extra"><br>-- <br><div class="gmail_signature">Nick Coghlan  |  <a href="mailto:ncoghlan@gmail.com" target="_blank">ncoghlan@gmail.com</a>  |  Brisbane, Australia</div>
</div></div>
RetroSearch is an open source project built by @garambo
| Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4