python 3.8.3 + openssl-1.1.1g 编译

root@iZm5e92aygmbacdsqcji2kZ:~/setup_py3# openssl version -a
OpenSSL 1.0.2s  28 May 2019
built on: reproducible build, date unspecified
platform: linux-x86_64
options:  bn(64,64) rc4(16x,int) des(idx,cisc,16,int) idea(int) blowfish(idx)
compiler: gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
OPENSSLDIR: "/usr/local/ssl"

查看 https://docs.python.org/3/library/ssl.html

Changed in version 3.6: OpenSSL 0.9.8, 1.0.0 and 1.0.1 are deprecated and no longer supported. In the future the ssl module will require at least OpenSSL 1.0.2 or 1.1.0.

但我还是重新编译

wget https://www.openssl.org/source/openssl-1.1.1g.tar.gz
tar xzvf openssl-1.1.1g.tar.gz
cd openssl-1.1.1g

./config
make
sudo make install

openssl version –a

OpenSSL 1.1.1g  21 Apr 2020

一键编译脚本

# Install requirements
sudo apt-get install -y build-essential
sudo apt-get install -y checkinstall
sudo apt-get install -y libreadline-gplv2-dev
sudo apt-get install -y libncursesw5-dev
sudo apt-get install -y libssl-dev
sudo apt-get install -y libsqlite3-dev
sudo apt-get install -y tk-dev
sudo apt-get install -y libgdbm-dev
sudo apt-get install -y libc6-dev
sudo apt-get install -y libbz2-dev
sudo apt-get install -y zlib1g-dev
sudo apt-get install -y openssl
sudo apt-get install -y libffi-dev
sudo apt-get install -y python3-dev
sudo apt-get install -y python3-setuptools
sudo apt-get install -y wget

# Prepare to build
# Pull down opensll and build
wget https://www.openssl.org/source/openssl-1.1.1g.tar.gz
tar xzvf openssl-1.1.1g.tar.gz
cd openssl-1.1.1g
./config
make
sudo make install

# Pull down Python 3.8, build, and install
#wget https://www.python.org/ftp/python/3.7.0/Python-3.7.0.tar.xz
wget https://www.python.org/ftp/python/3.8.3/Python-3.8.3.tgz
tar zxf Python-3.8.3.tgz
cd Python-3.8.3
./configure --enable-optimizations
sudo make altinstall

参考：

http://www.gaoshan.me/operation/optech/python/python-linux-ssl.html

https://joshspicer.com/python37-ssl-issue