From 72a20e9a37d4b519775bc3037bbcdc6fc6ea54a9 Mon Sep 17 00:00:00 2001 From: wangshuo Date: Wed, 11 Dec 2024 01:24:13 +0800 Subject: [PATCH] support TLS_SM4 --- ...xpected_algs-list-to-include-TLS_SM4.patch | 24 +++++++++++++++++++ python3.spec | 10 +++++++- 2 files changed, 33 insertions(+), 1 deletion(-) create mode 100644 0001-expected_algs-list-to-include-TLS_SM4.patch diff --git a/0001-expected_algs-list-to-include-TLS_SM4.patch b/0001-expected_algs-list-to-include-TLS_SM4.patch new file mode 100644 index 0000000..40a9b96 --- /dev/null +++ b/0001-expected_algs-list-to-include-TLS_SM4.patch @@ -0,0 +1,24 @@ +From de9673565c8b01cb3bb1032a8d30eed02ad658c1 Mon Sep 17 00:00:00 2001 +From: wangshuo +Date: Wed, 11 Dec 2024 00:55:55 +0800 +Subject: [PATCH] expected_algs list to include TLS_SM4 + +--- + Lib/test/test_ssl.py | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py +index 203351b..1e22a05 100644 +--- a/Lib/test/test_ssl.py ++++ b/Lib/test/test_ssl.py +@@ -4382,6 +4382,7 @@ class ThreadedTests(unittest.TestCase): + "AES256", "AES-256", + # TLS 1.3 ciphers are always enabled + "TLS_CHACHA20", "TLS_AES", ++ "TLS_SM4", + ] + + stats = server_params_test(client_context, server_context, +-- +2.43.0 + diff --git a/python3.spec b/python3.spec index e9b606a..533f01d 100644 --- a/python3.spec +++ b/python3.spec @@ -3,7 +3,7 @@ Summary: Interpreter of the Python3 programming language URL: https://www.python.org/ Version: 3.9.9 -Release: 9 +Release: 10 License: Python-2.0 %global branchversion 3.9 @@ -99,6 +99,7 @@ Patch6002: backport-bpo-20369-concurrent.futures.wait-now-deduplicates-f.patch Patch6003: backport-CVE-2023-27043-gh-102988-Reject-malformed-addres.patch Patch9000: add-the-sm3-method-for-obtaining-the-salt-value.patch +Patch9001: 0001-expected_algs-list-to-include-TLS_SM4.patch Provides: python%{branchversion} = %{version}-%{release} Provides: python(abi) = %{branchversion} @@ -188,6 +189,7 @@ rm -r Modules/expat %patch6003 -p1 %patch9000 -p1 +%patch9001 -p1 rm Lib/ensurepip/_bundled/*.whl rm configure pyconfig.h.in @@ -815,6 +817,12 @@ export BEP_GTDLIST="$BEP_GTDLIST_TMP" %{_mandir}/*/* %changelog +* Wed Dec 11 2024 wangshuo - 3.9.9-10 +- Type:update +- CVE:NA +- SUG:NA +- DESC:support TLS_SM4 + * Tue Nov 05 2024 GuoCe - 3.9.9-9 - Type:CVE - CVE:CVE-2023-27043 -- Gitee