[Python-Dev] Make str/bytes hash algorithm pluggable?

2013-10-03 Thread Christian Heimes
n. 3) Startup options: Like 2) plus an additional environment variable and command line argument to select an algorithm. With a startup option users can select a different algorithm themselves. Christian [1] http://www.python.org/dev/peps/pep-0456/ [2] https://twitter.com/EDE

Re: [Python-Dev] Make str/bytes hash algorithm pluggable?

2013-10-03 Thread Christian Heimes
have shown how to recover Python randomization keys. SipHash: more secure and about same speed on most systems optimized FNV: faster but with a known issue Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listin

Re: [Python-Dev] Make str/bytes hash algorithm pluggable?

2013-10-03 Thread Christian Heimes
See this oCERT advisory, and the following resources: [...] - Python script https://131002.net/siphash/poc.py to recover the secret seed of the hash randomization in Python 2.7.3 and 3.2.3 --- It's all documented in my PEP draft, too. Christian __

Re: [Python-Dev] PEP 456

2013-10-03 Thread Christian Heimes
effective hash collision DoS works with 7 or 8 chars. >> The summarized total runtime of the benchmark is within 1% of the > runtime of an unmodified Python 3.4 binary. > > What about deviations of individual tests? Here you go. http://pastebin.com/dKdnBCgb http://pastebin.com

Re: [Python-Dev] Make str/bytes hash algorithm pluggable?

2013-10-04 Thread Christian Heimes
> to other kinds of DoS. It's like the XML bomb: the vulnerability > was also known since many years, but Christian only fixed the issue > recently (and the fix was implemented in a package on the > Cheeseshop, not in the stblib! Is that correct?). About the XML bomb and other issues ... I ki

Re: [Python-Dev] Python startup time

2013-10-09 Thread Christian Heimes
Am 09.10.2013 14:39, schrieb Benjamin Peterson: > There's also the increasing number of modules (Python or otherwise) > that have to be loaded on startup. I have gathered some stats: Python 3.4: >>> len(sys.modules) 56 >>> len(list(name for name in sys.modules if name not in sys.buil

Re: [Python-Dev] Python startup time

2013-10-09 Thread Christian Heimes
Am 09.10.2013 14:54, schrieb Christian Heimes: > Am 09.10.2013 14:39, schrieb Benjamin Peterson: >> There's also the increasing number of modules (Python or otherwise) >> that have to be loaded on startup. We can easily peel off about 11 modules (re, sysconfig and their dep

Re: [Python-Dev] Python startup time

2013-10-10 Thread Christian Heimes
Am 10.10.2013 02:18, schrieb Eric Snow: > On Wed, Oct 9, 2013 at 8:30 AM, Christian Heimes > wrote: >> The os module imports MutableMapping from collections.abc. That >> import adds collections, collections.abc and eight more modules. >> I'm not sure if we can

Re: [Python-Dev] Python startup time

2013-10-10 Thread Christian Heimes
NFrpa7Jh Ain't bad! The benchmarks were conducted on a fast 8 core machine with SSD. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] cpython: Issue #19209: Remove import of copyreg from the os module to speed up

2013-10-12 Thread Christian Heimes
Am 12.10.2013 01:32, schrieb Nick Coghlan: >> diff --git a/Lib/test/test_site.py b/Lib/test/test_site.py >> --- a/Lib/test/test_site.py >> +++ b/Lib/test/test_site.py >> @@ -431,10 +431,13 @@ >> modules = eval(stdout.decode('utf-8')) >> self.assertIn('site', modules) >> >> +

Re: [Python-Dev] Change PEP 399 import recommendation

2013-10-12 Thread Christian Heimes
in favor of the pure Python modules. No hacks, no facade module, no slow down and it's easy to understand, too. The approach can be used for stat, operator, decimal and perhaps other modules, too. Christian ___ Python-Dev mailing list Python-Dev@py

[Python-Dev] Right place for PBKDF2 wrapper

2013-10-12 Thread Christian Heimes
le * make ``crypt`` work under Windows and add PKBDF2 to it The patch is available at http://bugs.python.org/issue18582 Regards, Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubsc

Re: [Python-Dev] Right place for PBKDF2 wrapper

2013-10-12 Thread Christian Heimes
ide a fast one-shot-wonder function that returns the MAC as bytes: hmac(name, key, value) -> result Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.or

Re: [Python-Dev] Change PEP 399 import recommendation

2013-10-12 Thread Christian Heimes
Am 12.10.2013 19:02, schrieb Antoine Pitrou: > If you grow sys.path, imports get slower. > (IMHO it also makes the source tree more cumbersome to navigate) It shouldn't slow down successful imports. The module finder stops at first hit. A directory with pure Python modules is less cumbersome than

Re: [Python-Dev] Right place for PBKDF2 wrapper

2013-10-13 Thread Christian Heimes
_operator.c. Its official home is hmac.compare_digest. Christian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCgAGBQJSWnhsAAoJEMeIxMHUVQ1FeCoP/1iuk+IK

Re: [Python-Dev] BDFL ruling request: should we block forever waiting for high-quality random bits?

2016-06-09 Thread Christian Heimes
_Py_HashSecret first, fall back to a user space RNG when the Kernel's CPRNG would block. For some operating systems like Windows and OSX, we can assume that Kernel CPRNG is always available. For Linux we can use getrandom() in non-blocking mode and handle EWOULDBLOCK. On BSD the seed state can be q

Re: [Python-Dev] BDFL ruling request: should we block forever waiting for high-quality random bits?

2016-06-09 Thread Christian Heimes
On 2016-06-09 19:14, Steven D'Aprano wrote: > On Thu, Jun 09, 2016 at 12:39:00PM -0400, Donald Stufft wrote: > >> There are three options for what do with os.urandom by default: >> >> * Allow it to silently return data that may or may not be >> cryptographically secure based on what the state of

Re: [Python-Dev] BDFL ruling request: should we block forever waiting for high-quality random bits?

2016-06-09 Thread Christian Heimes
ad ideas. Please, please don't add unnecessary noise to security discussions. os.urandom() is not about the concrete foundation of a bike shed. It's the f...reaking core catcher [2] of a nuclear power plant. You want to have a secure core catcher when the nuclear re

Re: [Python-Dev] BDFL ruling request: should we block forever waiting for high-quality random bits?

2016-06-11 Thread Christian Heimes
ble and make sure it never returns weak, predictable values (when possible)? The answers are: 1) No 2) No 3) HELL YES! If you think that the answer to 3 is "No" and that a CSPRNG is permitted to return predictable values, then you are *by definition* ineligible to vote on security i

Re: [Python-Dev] BDFL ruling request: should we block forever waiting for high-quality random bits?

2016-06-11 Thread Christian Heimes
sary strength or perhaps the necessary faith to continue rolling the stone of Sisyphus against the forces of reaction which are triumphing everywhere. I am therefore retiring from the lists, and ask if my dear contemporaries only one thing — oblivion." Christian

Re: [Python-Dev] New hash algorithms: SHA3, SHAKE, BLAKE2, truncated SHA512

2016-06-12 Thread Christian Heimes
On 2016-05-25 12:29, Christian Heimes wrote: > Hi everybody, > > I have three hashing-related patches for Python 3.6 that are waiting for > review. Altogether the three patches add ten new hash algorithms to the > hashlib module: SHA3 (224, 256, 384, 512), SHAKE (SHA3 XOF 128,

Re: [Python-Dev] frame evaluation API PEP

2016-06-20 Thread Christian Heimes
e of bytes becaues it mixes int and ptr. If we move the int co_firstlineno member below the co_flags member, then the struct size shrinks by 64 bits on 64bit system -- the exact same size a PyObject *co_extras member. Christian ___ Python-Dev mailing li

Re: [Python-Dev] Should we fix these errors?

2016-07-22 Thread Christian Heimes
ain? Some of these issues have been found by Coverity and I even have patches for them, e.g. N6 is CID#1299595. I have 13 patches that I haven't published and merged yet. None of the issues is critical, though. Since I forgot how to use hg I have been waiting for the github migration. Christian

Re: [Python-Dev] Should we fix these errors?

2016-07-23 Thread Christian Heimes
v.c] are all OpenSSL issues and should be reported to OpenSSL. Guido, did the company contact you or do you have Pavel Belikov's email address? Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/lis

[Python-Dev] socket.setsockopt() with optval=NULL

2016-08-21 Thread Christian Heimes
he idea of value=(None, int) most. setsockopt(socket.SOL_ALG, socket.ALG_SET_AEAD_AUTHSIZE, (None, taglen)) What do you think? Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscri

[Python-Dev] Supported versions of OpenSSL

2016-08-28 Thread Christian Heimes
upcoming 3.6 I would like to limit support to 1.0.2+ and require 1.0.2 features for 3.7. What is the status of Python.org's OSX builds? Is it possible to drop 0.9.8? Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-28 Thread Christian Heimes
On 2016-08-29 04:38, Ned Deily wrote: > On Aug 28, 2016, at 19:06, Benjamin Peterson wrote: >> On Sun, Aug 28, 2016, at 13:40, Christian Heimes wrote: >>> Here is the deal for 2.7 to 3.5: >>> >>> 1) All versions older than 0.9.8 are completely out-of-scope and

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-29 Thread Christian Heimes
On 2016-08-29 10:09, M.-A. Lemburg wrote: > On 28.08.2016 22:40, Christian Heimes wrote: >> ... >> I like to reduce the maintenance burden and list of supported OpenSSL >> versions ASAP. OpenSSL has deprecated 0.9.8 and 1.0.0 last year. 1.0.1 >> will reach EOL by the

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-29 Thread Christian Heimes
On 2016-08-29 21:31, M.-A. Lemburg wrote: > On 29.08.2016 18:33, Cory Benfield wrote: >> >>> On 29 Aug 2016, at 04:09, M.-A. Lemburg wrote: >>> >>> On 28.08.2016 22:40, Christian Heimes wrote: >>>> ... >>>> I like to reduce the mainten

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-29 Thread Christian Heimes
OpenSSL, but not use the > packaged version (which is 3.4) of Python? Please let me rephrase the question. How likely is it that somebody won't use a container to deploy more recent versions? It's 2016. Christian ___ Python-Dev mailing l

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-29 Thread Christian Heimes
7;m not planning to require 1.0.2 APIs for 3.6 yet. This may change in case new security issues are found. I might clean up the ssl module and require 0.9.8zc+ during beta, though. Christian ___ Python-Dev mailing list Python-Dev@python.org http

Re: [Python-Dev] Update on PEP 523 and adding a co_extra field to code objects

2016-08-29 Thread Christian Heimes
objects pluggable and introduce a new flag that > signals that the object was created using a non-default allocator. > Obviously we prefer the former solution due to its simplicity. :) May I remind you that you can have the field with no extra memory cost? :) The struct has sub-par

Re: [Python-Dev] Update on PEP 523 and adding a co_extra field to code objects

2016-08-30 Thread Christian Heimes
CodeObject is padded with two unused areas of 32bit: 5 * int32 + 32 bits of padding, 9 * pointers (64 bits each), 1 * int32 + another 32 bits of padding, 3 * pointers. When you move co_firstlineno, you fill in the gap. Christian ___ Python-Dev mailing list

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-31 Thread Christian Heimes
and I'm not willing to invest extra work to supported deprecated, unsupported and insecure versions. Second I'm going to require features that are 1.0.2 only. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-31 Thread Christian Heimes
On 2016-08-31 10:31, M.-A. Lemburg wrote: > In all this discussion I have yet to find a compelling security > relevant argument for using an 1.0.2 API which is so important > that we cannot make this optional at runtime. > > The only argument Christian reported was this one: >

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-31 Thread Christian Heimes
On 2016-08-31 11:33, M.-A. Lemburg wrote: > On 31.08.2016 10:50, Christian Heimes wrote: >> On 2016-08-31 10:31, M.-A. Lemburg wrote: >>> In all this discussion I have yet to find a compelling security >>> relevant argument for using an 1.0.2 API which is so important &

Re: [Python-Dev] Supported versions of OpenSSL

2016-08-31 Thread Christian Heimes
On 2016-08-30 18:00, Antoine Pitrou wrote: > On Sun, 28 Aug 2016 22:40:11 +0200 > Christian Heimes wrote: >> >> Here is the deal for 2.7 to 3.5: >> >> 1) All versions older than 0.9.8 are completely out-of-scope and no >> longer supported. >> >> 2)

[Python-Dev] Patch reviews

2016-08-31 Thread Christian Heimes
ciphers https://bugs.python.org/issue27744 Add AF_ALG (Linux Kernel crypto) to socket module http://bugs.python.org/issue16113 Add SHA-3 and SHAKE (Keccak) support http://bugs.python.org/issue26798 add BLAKE2 to hashlib Christian ___ Python-Dev mailing

Re: [Python-Dev] Patch reviews

2016-09-01 Thread Christian Heimes
On 2016-08-31 22:31, Christian Heimes wrote: > Hi, > > I have 7 patches for 3.6 ready for merging. The new features were > discussed on Security-SIG and reviewed by Victor or GPS. The patches > just need one final review and an ACK. The first three patches should > land in 2.7

Re: [Python-Dev] Tweak to PEP 523 for storing a tuple in co_extra

2016-09-03 Thread Christian Heimes
on't have to hard-code their offset and two libraries will never conflict. PyCode_New() can pre-populate co_extra with a PyTuple of size code_index. This avoids most resizes if you load Pyjion early. For code_index == 0 leaf the field NULL. Christian __

Re: [Python-Dev] Patch reviews

2016-09-04 Thread Christian Heimes
On 2016-09-01 23:15, Victor Stinner wrote: > 2016-08-31 22:31 GMT+02:00 Christian Heimes : >> https://bugs.python.org/issue27744 >> Add AF_ALG (Linux Kernel crypto) to socket module > > This patch adds a new socket.sendmsg_afalg() method on Linux. > > "afal

[Python-Dev] TLS handshake performance boost

2016-09-05 Thread Christian Heimes
week or to write a high-level mechanism to auto-reuse sessions. I still like to get the feature in before Monday. What do you think? Are you fine with low-level session feature and reduced documentation for the beta release? Christian ___ Python-Dev ma

[Python-Dev] hg push segfault

2016-09-08 Thread Christian Heimes
: no suitable response from remote hg! It's fine again now. Can somebody look into the matter, please? Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.pytho

Re: [Python-Dev] cpython (3.5): supress coroutine warning when an exception is pending (#27968)

2016-09-08 Thread Christian Heimes
>gi_frame->f_lasti == -1) { > +if (!error_value) { > +PyErr_WarnFormat(PyExc_RuntimeWarning, 1, > + "coroutine '%.50S' was never awaited", > + gen->gi_qualname); > +} You don&#x

[Python-Dev] Let's make the SSL module sane

2016-09-10 Thread Christian Heimes
* only ctx.wrap_socket(server_side=True) works I hope this mail makes sense. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] Let's make the SSL module sane

2016-09-10 Thread Christian Heimes
On 2016-09-10 18:24, Donald Stufft wrote: > >> On Sep 10, 2016, at 10:22 AM, Christian Heimes wrote: >> >> I don't load any certs because it is not possible to remove a cert or >> X509 lookup once it is loaded. create_default_context() just have to >> lo

Re: [Python-Dev] Let's make the SSL module sane

2016-09-10 Thread Christian Heimes
On 2016-09-10 17:24, Nick Coghlan wrote: > On 11 September 2016 at 00:22, Christian Heimes wrote: >> First I like to deprecated some old APIs and favor of SSLCotext. We have >> multiple ways to create a SSL socket or to configure libraries like >> urllib. The general idea

Re: [Python-Dev] cpython: Issue #27999: Make "global after use" a SyntaxError, and ditto for nonlocal.

2016-09-12 Thread Christian Heimes
} > +PyErr_Format(PyExc_SyntaxError, msg, name); Hi Guido, did you mean if / else if / else here? It's not completely clear if the code means to set msg a second time if both cur & DEF_ANNOT and cur & DEF_LOCAL are true. Christian ___

Re: [Python-Dev] cpython: Issue #27999: Make "global after use" a SyntaxError, and ditto for nonlocal.

2016-09-12 Thread Christian Heimes
On 2016-09-12 11:46, Ivan Levkivskyi wrote: > Christian, > > When I wrote this, my intention was like: cur & DEF_LOCAL is a "more > serious" error, so that if both errors are made in the same statement: > def f(): > x: int = 5 > global x > > "

Re: [Python-Dev] cpython: Issue #27999: Make "global after use" a SyntaxError, and ditto for nonlocal.

2016-09-12 Thread Christian Heimes
On 2016-09-12 12:29, Ivan Levkivskyi wrote: > On 12 September 2016 at 12:24, Christian Heimes <mailto:christ...@python.org>> wrote: > > The code looks suspicious. Can you please > provide a patch that makes it more obvious, e.g. either by using if / > els

Re: [Python-Dev] cpython (3.6): replace usage of Py_VA_COPY with the (C99) standard va_copy

2016-09-21 Thread Christian Heimes
On 2016-09-21 05:39, benjamin.peterson wrote: > https://hg.python.org/cpython/rev/278b21d8e86e > changeset: 103977:278b21d8e86e > branch: 3.6 > parent: 103975:d31b4de433b7 > user:Benjamin Peterson > date:Tue Sep 20 20:39:33 2016 -0700 > summary: > replace usage of Py_

[Python-Dev] Code quality report

2016-09-24 Thread Christian Heimes
issue28117. Regards, Christian signature.asc Description: OpenPGP digital signature ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

[Python-Dev] __future__ and eval()

2016-10-01 Thread Christian Tismer
the future statement were implicitly there. Is that a bug or a feature? You can try the effect by "pip install dedent" and adding the future statement there. I'd like to know if this is a bug (and I think so) -- Christian Tismer :^) tis...@stackless.com Soft

Re: [Python-Dev] __future__ and eval()

2016-10-01 Thread Christian Tismer
parameter. > > Would that clarify? Yes please, that would be a good place to document it. For some reason I did not look up __future__. Thanks -- Chris On 01/10/16 14:17, Chris Angelico wrote: On Sat, Oct 1, 2016 at 9:39 PM, Christian Tismer wrote: The exec() script inherited the __futu

Re: [Python-Dev] Debugging Python scripts with GDB on OSX

2016-10-13 Thread Christian Tismer
Hi Alexandru, I stumbled over this question a little late by chance. There is the possibility to use GDB, but it is most likely that you want to use python's pdb module, instead. Only in rare cases, when debugging the interpreter itself, you use gdb. For debugging Python code, use pdb or som

Re: [Python-Dev] Debugging Python scripts with GDB on OSX

2016-10-14 Thread Christian Tismer
functions, and which parts of > python call c++ functions. You can't do that with pdb. > > >> On 13 Oct 2016, at 19:12, Christian Tismer > <mailto:tis...@stackless.com>> wrote: >> >> Hi Alexandru, >> >> I stumbled over this question a little

Re: [Python-Dev] Tests breakage with latest openssl (issue28689)

2016-11-28 Thread Christian Heimes
28689 > > [0] https://github.com/openssl/openssl/issues/1903 > [1] > https://github.com/openssl/openssl/commit/beacb0f0c1ae7b0542fe053b95307f515b578eb7 Hi Charalampos, Python's 3.6 and default (3.7) tests suite is passing with OpenSSL 1.1.0d-dev (OpenSSL_1_1_

Re: [Python-Dev] Tests breakage with latest openssl (issue28689)

2016-11-29 Thread Christian Heimes
On 2016-11-28 18:16, Charalampos Stratakis wrote: > Hi Christian and thanks for the fast reply, > > It's great to hear that the latest version is working fine. Do you have > anymore details on the fix/breakage? > > The latest commit at Fedora's rawhide opens

[Python-Dev] 3.6.0: OpenSSL 1.1.0c is not supported

2016-12-14 Thread Christian Heimes
Hi Ned, please add a reminder to the release docs that Python 3.6.0 is not compatible with OpenSSL 1.1.0c, https://bugs.python.org/issue28689. 1.1.0 to 1.1.0b work fine. 1.1.0d will be compatible, too. Regards, Christian signature.asc Description: OpenPGP digital signature

Re: [Python-Dev] Deprecate `from __future__ import unicode_literals`?

2016-12-17 Thread Christian Heimes
verted to str, and since the result is cached, this even don't add > much overhead. It breaks the str optimization of dicts. Dict with str-only keys are special-cased in Python 2. Christian ___ Python-Dev mailing list Python-Dev@python.org

Re: [Python-Dev] Investigating Python memory footprint of one real Web application

2017-01-20 Thread Christian Heimes
th multiple processors could benefit from the improvement, but also single processor/multi core machines. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] Investigating Python memory footprint of one real Web application

2017-01-20 Thread Christian Heimes
th multiple processors could benefit from the improvement, but also single processor/multi core machines. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] SSL certificates recommendations for downstream python packagers

2017-01-30 Thread Christian Heimes
e's native TLS lib (with some restrictions regarding fork()). In the mean time you are screwed and have to rely on certifi. As last resort, use certifi. You HAVE to make sure to keep it up to date and you have to deal with local policies and CAs yourself. Christian

Re: [Python-Dev] SSL certificates recommendations for downstream python packagers

2017-01-30 Thread Christian Heimes
rtion Objects. We could use https://p11-glue.freedesktop.org/doc/pkcs11-trust-assertions/#pkcs11-objects under Linux and the PKCS#11 under Windows and macOS. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/list

Re: [Python-Dev] SSL certificates recommendations for downstream python packagers

2017-01-30 Thread Christian Heimes
nimal set of trust anchors. Chrome, IE and Edge use the proper APIs. There is no way to get internal CA on macOS with 3.6, with certifi, or with self-build OpenSSL. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] SSL certificates recommendations for downstream python packagers

2017-01-30 Thread Christian Heimes
27;] = os.devnull ctx = ssl.create_default_context() Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] SSL certificates recommendations for downstream python packagers

2017-01-31 Thread Christian Heimes
On 2017-01-31 10:19, Cory Benfield wrote: > >> On 30 Jan 2017, at 21:00, David Cournapeau > > wrote: >> >> >> >> On Mon, Jan 30, 2017 at 8:50 PM, Cory Benfield > > wrote: >> >> >> >> > On 30 Jan 2017, at 13:53, David Cournapeau >

Re: [Python-Dev] Python FTP Injections Allow for Firewall Bypass (oss-security advisory)

2017-02-24 Thread Christian Heimes
izational overhead. Personally, I'm good in finding and fixing security issues. The actual communication, reporting and press releases are not my strength. Victor's incredible work on http://python-security.readthedocs.io/vulnerabilities.html is going to help, too. Christian _

Re: [Python-Dev] python(_hashlib.so) compiled with libssl.so.1.0.1e cannot work with libssl.so.0.9.8e

2017-03-15 Thread Christian Heimes
e vendors (RH, Ubuntu) still maintain 1.0.1, though. Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] On "PEP 546 — Backport ssl.MemoryBIO and ssl.SSLObject to Python 2.7"

2017-06-10 Thread Christian Heimes
itself yet another 2.7.x backport) work well. > > Therefore, as 2.7 release manager, I'm accepting the PEP. That's fantastic news. Thanks Benjamin! Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailm

[Python-Dev] __qualname__ format question

2017-06-25 Thread Christian Tismer
romFormat("%S.%S", type_qualname, descr->d_name); To my knowledge, the "%S" character is undefined in C99 and C11. Q: Why this character, and why this difference? cheers - Chris -- Christian Tismer :^) tis...@stackless.com Software Consulting : http://www.

Re: [Python-Dev] __qualname__ format question

2017-06-25 Thread Christian Tismer
On 25.06.17 14:41, Serhiy Storchaka wrote: > 25.06.17 15:06, Christian Tismer пише: >> by chance, I stumbled over >> >> meth_get__qualname__ >> >> in methodobject.c and >> >> calculate_qualname >> >> in descrobject.c . >>

Re: [Python-Dev] Impact of Namedtuple on startup time

2017-07-17 Thread Christian Heimes
x27;s lighting talk "Python as a security vulnerability" at the language summit, https://lwn.net/Articles/723823/ . Christian ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] python issue27584 AF_VSOCK support

2017-08-17 Thread Christian Heimes
n the upstream linux kernel so its adoption is spreading amongst > the various hypervisors. > > Any guidance on the basic timelines would be very helpful. Hi Cathy, thanks for your contribution! Your patch looks mostly fine. I pointed out some minor i

[Python-Dev] __signature__ for PySide ready

2017-08-18 Thread Christian Tismer
Cheers -- Chris -- Christian Tismer :^) tis...@stackless.com Software Consulting : http://www.stackless.com/ Karl-Liebknecht-Str. 121 : https://github.com/PySide 14482 Potsdam: GPG key -> 0xFB7BEE0E phone +49 173 24 18 776 fax +49 (30) 700143-002

Re: [Python-Dev] __signature__ for PySide ready

2017-08-19 Thread Christian Tismer
d much more internal knowledge as intended... Well, I thought the existence of __signature__ might be a good reason to switch to Python 3, but if I support Python 2, the advantage is gone. But if it's ok with you, then I'll publish both versions. Thanks a lot for the feedb

Re: [Python-Dev] __signature__ for PySide ready

2017-08-19 Thread Christian Tismer
Hi Brett, On 18.08.17 18:31, Brett Cannon wrote: > > > On Fri, 18 Aug 2017 at 02:05 Christian Tismer <mailto:tis...@stackless.com>> wrote: > ... > Is it a bad idea to support signatures in Python 2 as well? > Do I introduce a feature that should not exist

Re: [Python-Dev] limited_api and datetime

2017-08-22 Thread Christian Tismer
inherently hides any struct layout > details behind PyObject*. Thank you very much for the clarification. I think we can live with the Python interface for now. Now I'm sure that I'm going the way to go. Cheers -- Chris -- Christian Tismer :^) tis...@stackless.com Softw

Re: [Python-Dev] Compiling without multithreading support -- still useful?

2017-09-05 Thread Christian Heimes
essing. Also subprocess.communicate() on Windows, > no? > > I'm strongly in favor of dropping this option from Python 3.7. It > would remove a lot of code! +1 These days, tiny embedded devices can make use of MicroPython. Christian ___ Pytho

[Python-Dev] Re: compiled python3.10 is unable to find _ssl

2021-10-19 Thread Christian Heimes
On 19/10/2021 11.57, Robin Becker wrote: On 18/10/2021 18:50, Senthil Kumaran wrote: Your configure script did pick up openssl as the support version was not found. What is your operating system? Make sure you have supported version of ssl. Python requires openssl 1.1.1 or higher. ... I t

[Python-Dev] Re: compiled python3.10 is unable to find _ssl

2021-10-19 Thread Christian Heimes
On 19/10/2021 17.26, Robin Becker wrote: On 19/10/2021 11:21, Christian Heimes wrote: On 19/10/2021 11.57, Robin Becker wrote: .. For PEP 644 I added new instructions how to build Python 3.10 with custom OpenSSL builds. The instructions should work on all major Linux distributions

[Python-Dev] Re: compiled python3.10 is unable to find _ssl

2021-10-20 Thread Christian Heimes
On 20/10/2021 09.43, Robin Becker wrote: On 19/10/2021 16:45, Christian Heimes wrote: We use the standard AX_CHECK_OPENSSL() m4 macro from autoconf-archive to detect OpenSSL. The macro uses pkg-config to detect OpenSSL. It doesn't check for specific version, though. We don't want

[Python-Dev] Re: Clarification regarding Stable ABI and _Py_*

2021-12-07 Thread Christian Heimes
common on LTS/Enterprise Linux distros. If the current stable ABI makes performance improvements too complex then we should consider to define a new stable ABI with less symbols. Christian [1] https://pypi.org/project/cryptography/#files ___ Python-Dev

[Python-Dev] Re: Explicit markers for special C-API situations (re: Clarification regarding Stable ABI and _Py_*)

2021-12-09 Thread Christian Heimes
PyObject *) PyLong_FromLong(long); and dumps the declaration as: extern struct PyObject * PyLong_FromLong (long int); "abi_func" Christian ___ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-

[Python-Dev] Re: Explicit markers for special C-API situations

2021-12-10 Thread Christian Heimes
On 10/12/2021 03.08, Jim J. Jewett wrote: Christian Heimes wrote: On 09/12/2021 19.26, Petr Viktorin wrote: If the code is the authoritative source of truth, we need a proper parser to extract the information. ... unfortunately I don't trust it enough to let it define the API. Bugs i

[Python-Dev] Re: Python release announcement format

2021-12-14 Thread Christian Heimes
g file (sha256sum --tag) and sign it with OpenGPG. The signature of a sha256 checksum file is as good as signing the files directly. Christian ___ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-le...@python

[Python-Dev] Re: "immortal" objects and how they would help per-interpreter GIL

2021-12-15 Thread Christian Heimes
+= !(ob_refcnt >> 63) instead of ob_refcnt++ The code performs "ob_refcnt += 1" when the highest bit is not set and "ob_refcnt += 1" when the bit is set. I have neither tested if the approach actually works nor it's performance. Christian ___

[Python-Dev] [PSA] OpenSSL 3.0 support is preliminary and experimental

2022-01-09 Thread Christian Heimes
me is currently limited, too. Christian [1] https://docs.python.org/3/whatsnew/3.10.html#ssl ___ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-le...@python.org https://mail.python.org/mailman3/lists/p

[Python-Dev] Re: [PSA] OpenSSL 3.0 support is preliminary and experimental

2022-01-11 Thread Christian Heimes
On 11/01/2022 12.02, Antoine Pitrou wrote: Hi Christian, On Sun, 9 Jan 2022 19:39:06 +0100 Christian Heimes wrote: Hi, I would like to remind everybody that Python's support for OpenSSL 3.0 is preliminary [1]. Python compiles with OpenSSL 3.0.0 and simple code kinda works. However ther

[Python-Dev] Re: [PSA] OpenSSL 3.0 support is preliminary and experimental

2022-01-12 Thread Christian Heimes
On 10/01/2022 17.01, Miro Hrončok wrote: On 09. 01. 22 19:39, Christian Heimes wrote: Hi, I would like to remind everybody that Python's support for OpenSSL 3.0 is preliminary [1]. Python compiles with OpenSSL 3.0.0 and simple code kinda works. However there are known performance regres

[Python-Dev] Re: Dropping AC_C_CHAR_UNSIGNED from configure.ac?

2022-01-24 Thread Christian Heimes
On 24/01/2022 14.34, Miro Hrončok wrote: Hello Pythonistas. In (development branch of) Fedora, we have juts upgraded to GCC 12. It seems that the presence of AC_C_CHAR_UNSIGNED in Python's autotools files (configure.ac?) is causing the __CHAR_UNSIGNED__ symbol to be defined in pyconfig.h and

[Python-Dev] Re: Please update Cython *before* introcuding C API incompatible changes in Python

2022-02-01 Thread Christian Heimes
I would prefer if we can get Cython and all the other code generator and bindings library off the unstable C-API. They should use the limited API instead. If they require any C-APIs outside the limited API, then we should investigate and figure something out.

[Python-Dev] Re: Please update Cython *before* introcuding C API incompatible changes in Python

2022-02-02 Thread Christian Heimes
2) look for each symbol in Cython sources Christian ___ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-le...@python.org https://mail.python.org/mailman3/lists/python-dev.python.org/ Message archived at https://m

[Python-Dev] Re: It's now time to deprecate the stdlib urllib module

2022-02-06 Thread Christian Heimes
e set of urllib to core HTTP (no ftp, proxy, HTTP auth) and a partial rewrite with stricter, more standard conform parsers for urls, query strings, and RFC 2822 instead of RFC 822 for headers. Christian ___ Python-Dev mailing list -- python-dev@python

[Python-Dev] Re: Defining tiered platform support

2022-03-04 Thread Christian Heimes
orm? CentOS 7 comes with an old GCC, but has newer GCC versions in SCL (Developer Toolset 8). I'm asking because CentOS 7's default gcc does not support stdatomic.h. The official manylinux2014 OSCI container image ships GCC from devtoolset-8. Christian _

[Python-Dev] Re: Defining tiered platform support

2022-03-07 Thread Christian Heimes
. I wouldn't list compiler versions, though. Compiler features like C99 support should be sufficient. Then what more would you want than what's listed in PEP 7 already? Nothing in particular other than a link to the PEP, so people can discover the requirement more easily.

[Python-Dev] Re: Defining tiered platform support

2022-03-07 Thread Christian Heimes
nd of info. But a Python enhancement proposal is even weirder. +1 for our main docs (cpython/Doc/) Platform support is Python versions specific. Python 3.10 may support different version than 3.11 or 3.12. It makes sense to keep the support information with the code. Chri

[Python-Dev] Re: Supported make implementations

2022-03-12 Thread Christian Heimes
s GNU make features that are not supported by BSD make. Could you please open a bug at https://github.com/sphinx-doc/sphinx ? Christian ___ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-le...@python.org

[Python-Dev] Re: Migration plan for the distutils removal in Python 3.12

2022-05-10 Thread Christian Heimes
tup.stdlib. The remaining modules should be done in a couple of weeks. I recommend that we do not rename distutils and instead remove it entirely. Christian ___ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-

[Python-Dev] Re: Migration plan for the distutils removal in Python 3.12

2022-05-10 Thread Christian Heimes
tup.stdlib. The remaining modules should be done in a couple of weeks. I recommend that we do not rename distutils and instead remove it entirely. Christian ___ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-

<    1   2   3   4   5   6   7   8   9   10   >