[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-commits] [Git][tpo/applications/tor-browser-build][main] Bug 41282: Downgrade to Python 3.9.

Title: GitLab

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build

Commits:

  • 9c66c1ac
    by Pier Angelo Vendrame at 2024-10-28T11:59:55+01:00 
    Bug 41282: Downgrade to Python 3.9.

MozBug 1924022 introduced a dependency on the Python built-in SSL
module.
This caused an error in our Linux builds, because we run them in a very
old version of Debian that still uses OpenSSL 1.1.0, which is not
compatible with Python SSL module since Python 3.10.
The less intrusive way to resolve this is to downgrade to Python 3.9.x,
which is still supported by all our projects.

Also, switch to hashes to verify the Python source tarball, as the
Python Software Foundation often rotates keys, which reduces the
advantages of verifying the signature rather than the hash for us.

2 changed files:

Changes:

  • keyring/python.gpg deleted
    No preview for this file type
  • projects/python/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: 3.11.3
    2 
    +version: 3.9.20
    3 3 
     filename: 'python-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    ... ... @@ -24,9 +24,7 @@ input_files:
    24 24 
       - project: container-image
    25 25 
       - name: python
    26 26 
         URL: 'https://www.python.org/ftp/python/[% c("version") %]/Python-[% c("version") %].tar.xz'
    27 
    -    gpg_keyring: python.gpg
    28 
    -    sig_ext: asc
    29 
    -    file_gpg_id: 1
    27 
    +    sha256sum: 6b281279efd85294d2d6993e173983a57464c0133956fbbb5536ec9646beaf0c
    30 28 
       - name: '[% c("var/compiler") %]'
    31 29 
         project: '[% c("var/compiler") %]'
    32 30 
         enable: '[% c("var/linux") %]'

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help 

    _______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits