PiBISSBWaW5jZW50Lgo+IAo+IFlvdSBuZWVkIHRoZSBzb3VyY2VzIG9mIHRoZSBPcGVuU1NMIGxp YnJhcnksIG5vdCB0aGUgY29tcGlsZWQgbGlicmFyeS4KPiBPbiBVYnVudHUsIHRoZSBwYWNrYWdl cyB3aXRoIHNvdXJjZXMgYXJlIHR5cGljYWxseSBuYW1lZCB4eHgtZGV2IHdoZXJlCj4geHh4IGlz IHRoZSBwYWNrYWdlIHRoYXQgcHJvdmlkZXMgdGhlIGxpYnJhcnkuIEkgZG9uJ3QgaGF2ZSBhIFVi dW50dQo+IGN1cnJlbnRseSwgYnV0IHRyeSBsb29raW5nIGZvciBzb21ldGhpbmcgbGlrZSBvcGVu c3NsLWRldiBvcgo+IGxpYm9wZW5zc2wtZGV2IGV0Yy4KClRoYW5rcywgdGhlIGRldiBwYWNrZWdl IHNlZW1zIG5hbWVkIGxpYnNzbC1kZXYuCkJ1dDoKLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQokIHN1ZG8gYXB0IGluc3RhbGwg bGlic3NsLWRldgpbc3Vkb10gTW90IGRlIHBhc3NlIGRlIHZpbmNlbnQgOiAKTGVjdHVyZSBkZXMg bGlzdGVzIGRlIHBhcXVldHMuLi4gRmFpdApDb25zdHJ1Y3Rpb24gZGUgbCdhcmJyZSBkZXMgZMOp cGVuZGFuY2VzLi4uIEZhaXQKTGVjdHVyZSBkZXMgaW5mb3JtYXRpb25zIGQnw6l0YXQuLi4gRmFp dCAgICAgIApsaWJzc2wtZGV2IGVzdCBkw6lqw6AgbGEgdmVyc2lvbiBsYSBwbHVzIHLDqWNlbnRl ICgzLjAuMTMtMHVidW50dTMuNCkuCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KSW4gZW5nbGlzaDogImxpYnNzbC1kZXYgaXMg YWxyZWFkeSB0aGUgbW9zdCByZWNlbnQgdmVyc2lvbiAoMy4wLjEzLTB1YnVudHUzLjQpLgoKVmlu Y2VudA==

--- MBSE BBS v1.0.8.4 (Linux-x86_64)
* Origin: ---:- FTN<->UseNet Gate -:--- (3:633/280.2@fidonet)

PiAKPiBJbiBjYXNlIHRoaXMgaGVscHMgeW91IGZpbmQgdGhlIGNvcnJlY3QgcGFja2FnZSB0byBp bnN0YWxsOgo+IAo+ICQgcHl0aG9uMyAtYyAiaWYgVHJ1ZToKPiA+ICAgICBpbXBvcnQgc3NsCj4g PiAgICAgcHJpbnQoJ09rLicpCj4gPiAiCj4gT2suCj4gCj4gJCBjYXQgL2V0Yy9sc2ItcmVsZWFz ZQo+IERJU1RSSUJfSUQ9VWJ1bnR1Cj4gRElTVFJJQl9SRUxFQVNFPTI0LjA0Cj4gRElTVFJJQl9D T0RFTkFNRT1ub2JsZQo+IERJU1RSSUJfREVTQ1JJUFRJT049IlVidW50dSAyNC4wNC4xIExUUyIK PiAKPiAkIGFwdCBsaXN0IC0taW5zdGFsbGVkIHwgZ3JlcCBzc2wKPiAKPiBXQVJOSU5HOiBhcHQg ZG9lcyBub3QgaGF2ZSBhIHN0YWJsZSBDTEkgaW50ZXJmYWNlLiBVc2Ugd2l0aCBjYXV0aW9uIGlu Cj4gc2NyaXB0cy4KPiAKPiBsaWJzc2wtZGV2L25vYmxlLXVwZGF0ZXMsbm9ibGUtc2VjdXJpdHks bm93IDMuMC4xMy0wdWJ1bnR1My40IGFtZDY0Cj4gW2luc3RhbGxlZF0KPiBsaWJzc2wzdDY0L25v YmxlLXVwZGF0ZXMsbm9ibGUtc2VjdXJpdHksbm93IDMuMC4xMy0wdWJ1bnR1My40IGFtZDY0Cj4g W2luc3RhbGxlZCxhdXRvbWF0aWNdCj4gbGlieG1sc2VjMXQ2NC1vcGVuc3NsL25vYmxlLG5vdyAx LjIuMzktNWJ1aWxkMiBhbWQ2NCBbaW5zdGFsbGVkLGF1dG9tYXRpY10KPiBvcGVuc3NsL25vYmxl LXVwZGF0ZXMsbm9ibGUtc2VjdXJpdHksbm93IDMuMC4xMy0wdWJ1bnR1My40IGFtZDY0Cj4gW2lu c3RhbGxlZCxhdXRvbWF0aWNdCj4gc3NsLWNlcnQvbm9ibGUsbm9ibGUsbm93IDEuMS4ydWJ1bnR1 MSBhbGwgW2luc3RhbGxlZCxhdXRvbWF0aWNdCgpUaGFua3MgSmFzb24sIEkgaGF2ZSBuZWFyIHRo ZSBzYW1lIHJlc3VsdCBvZiB5b3UuCkkgbmVlZCB0byBleHBsYWluIHRoZSBjb250ZXh0LgpJJ20g b24gYSBuZXcgbWFjaGluZSB3aXRoIGEgZnJlc2ggaW5zdGFsbCBvZiBVYnVudHUgMjQuMDQgd2lj aCBlbWJlZCBQeXRob24gMy4xMi4zLCBubyBwcm9ibGVtIHdpdGggdGhhdC4KCkFzIEknbSBtYWlu dGFpbmVyIG9mIHNvbWUgUHl0aG9uIG1vZHVsZXMgcHVibGlzaGVkIG9uIFB5UEksIEkndmUgdGhl IGhhYml0IG9mIHRlc3RpbmcgbXkgbW9kdWxlcyBpbiBkaWZmZXJlbnQgdmlydHVhbCBlbnZpcm9u bWVudHMuIEZvciBub3cgUHl0aG9uIDMuMTEsIDMuMTIgYW5kIDMuMTMuCgpTbywgSSd2ZSBtYXli ZSBmb3VuZCBhIHNvbHV0aW9uOgoKSSd2ZSBjcmVhdGUgaW4gbXkgaG9tZSBhIGRpciBuYW1lZCAv b3B0LCBkb3dubG9hZCBpbnRvIGl0IHRoZSBsYXRlc3QgdmVyc2lvbiBvZiBvcGVuc3NsLTEuMS4x IGFuZCB1bmNvbXByZXNzIGl0LigqKQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiQgY2Qgb3B0L29wZW5zc2wtMS4xLjF3CiQgLi9j b25maWcgJiYgbWFrZSAmJiBtYWtlIHRlc3QKJCBta2RpciAkSE9NRS9vcHQvbGliCiQgbXYgJEhP TUUvb3B0L29wZW5zc2wtMS4xLjF3L2xpYmNyeXB0by5zby4xLjEgJEhPTUUvb3B0L2xpYi8KJCBt diAkSE9NRS9vcHQvb3BlbnNzbC0xLjEuMXcvbGlic3NsLnNvLjEuMSAkSE9NRS9vcHQvbGliLwok IGV4cG9ydCBMRF9MSUJSQVJZX1BBVEg9JEhPTUUvb3B0L2xpYjokTERfTElCUkFSWV9QQVRICi0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tCkFuZCByZXJ1biB0aGUgY29tcGlsYXRpb24gb2YgMy4xMi45IHdpdGhvdXQgcHJvYmxlbSB3 aXRoIG9wZW5zc2wuCgooKikgaHR0cHM6Ly9vcGVuc3NsLWxpYnJhcnkub3JnL3NvdXJjZS9vbGQv MS4xLjEvaW5kZXguaHRtbAoKVmluY2VudC4KCgo=

--- MBSE BBS v1.0.8.4 (Linux-x86_64)
* Origin: ---:- FTN<->UseNet Gate -:--- (3:633/280.2@fidonet)

So, this is how I know where my SSL headers are found, for instance:

=E2=9E=9C cpython git:(3.12) gcc -I. -I./Include -H ./Modules/_ssl.c 2>&1 =
| grep evp.h
... /usr/include/openssl/evp.h

(this was executed from the repository root).

Can you see if you get something similar?

Also... just for sanity check: did you run .configure? There's a lot
of twisted logic there trying to find OpenSSL. And, unfortunately,
error reporting is very poor. (The error you are getting comes way,
way after everything bad has already happened and all knowledge of how
it happened is lost). Just all around atrocious error handling.


On Sun, Feb 9, 2025 at 5:51=E2=80=AFPM Vincent Vande Vyvre via Python-list <python-list@python.org> wrote:

In case this helps you find the correct package to install:

$ python3 -c "if True:

import ssl
print('Ok.')
"

Ok.

$ cat /etc/lsb-release
DISTRIB_ID=3DUbuntu
DISTRIB_RELEASE=3D24.04
DISTRIB_CODENAME=3Dnoble
DISTRIB_DESCRIPTION=3D"Ubuntu 24.04.1 LTS"

$ apt list --installed | grep ssl

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

libssl-dev/noble-updates,noble-security,now 3.0.13-0ubuntu3.4 amd64 [installed]
libssl3t64/noble-updates,noble-security,now 3.0.13-0ubuntu3.4 amd64 [installed,automatic]
libxmlsec1t64-openssl/noble,now 1.2.39-5build2 amd64 [installed,automat=

ic]

openssl/noble-updates,noble-security,now 3.0.13-0ubuntu3.4 amd64 [installed,automatic]
ssl-cert/noble,noble,now 1.1.2ubuntu1 all [installed,automatic]

Thanks Jason, I have near the same result of you.
I need to explain the context.
I'm on a new machine with a fresh install of Ubuntu 24.04 wich embed Pyth=

on 3.12.3, no problem with that.

As I'm maintainer of some Python modules published on PyPI, I've the habi=

t of testing my modules in different virtual environments. For now Python 3= ..11, 3.12 and 3.13.

So, I've maybe found a solution:

I've create in my home a dir named /opt, download into it the latest vers=

ion of openssl-1.1.1 and uncompress it.(*)

-------------------------------------------------------------
$ cd opt/openssl-1.1.1w
$ ./config && make && make test
$ mkdir $HOME/opt/lib
$ mv $HOME/opt/openssl-1.1.1w/libcrypto.so.1.1 $HOME/opt/lib/
$ mv $HOME/opt/openssl-1.1.1w/libssl.so.1.1 $HOME/opt/lib/
$ export LD_LIBRARY_PATH=3D$HOME/opt/lib:$LD_LIBRARY_PATH --------------------------------------------------------------
And rerun the compilation of 3.12.9 without problem with openssl.

(*) https://openssl-library.org/source/old/1.1.1/index.html

Vincent.

--
https://mail.python.org/mailman/listinfo/python-list

--- MBSE BBS v1.0.8.4 (Linux-x86_64)
* Origin: ---:- FTN<->UseNet Gate -:--- (3:633/280.2@fidonet)

vincent.vandevyvre@oqapy.eu writes:

In case this helps you find the correct package to install:

$ python3 -c "if True:

import ssl
print('Ok.')
"

Ok.

$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=24.04
DISTRIB_CODENAME=noble
DISTRIB_DESCRIPTION="Ubuntu 24.04.1 LTS"

$ apt list --installed | grep ssl

WARNING: apt does not have a stable CLI interface. Use with caution in
scripts.

libssl-dev/noble-updates,noble-security,now 3.0.13-0ubuntu3.4 amd64
[installed]
libssl3t64/noble-updates,noble-security,now 3.0.13-0ubuntu3.4 amd64
[installed,automatic]
libxmlsec1t64-openssl/noble,now 1.2.39-5build2 amd64 [installed,automatic] >> openssl/noble-updates,noble-security,now 3.0.13-0ubuntu3.4 amd64
[installed,automatic]
ssl-cert/noble,noble,now 1.1.2ubuntu1 all [installed,automatic]

Thanks Jason, I have near the same result of you.
I need to explain the context.
I'm on a new machine with a fresh install of Ubuntu 24.04 wich embed Python 3.12.3, no problem with that.

As I'm maintainer of some Python modules published on PyPI, I've the
habit of testing my modules in different virtual environments. For now
Python 3.11, 3.12 and 3.13.

So, I've maybe found a solution:

I've create in my home a dir named /opt, download into it the latest version of openssl-1.1.1 and uncompress it.(*)
-------------------------------------------------------------
$ cd opt/openssl-1.1.1w
$ ./config && make && make test
$ mkdir $HOME/opt/lib
$ mv $HOME/opt/openssl-1.1.1w/libcrypto.so.1.1 $HOME/opt/lib/
$ mv $HOME/opt/openssl-1.1.1w/libssl.so.1.1 $HOME/opt/lib/
$ export LD_LIBRARY_PATH=$HOME/opt/lib:$LD_LIBRARY_PATH --------------------------------------------------------------
And rerun the compilation of 3.12.9 without problem with openssl.

(*) https://openssl-library.org/source/old/1.1.1/index.html

OpenSSL 1.1.1 is pretty old, released in 2018 if I'm not mistaken.

An environment on Ubuntu 24.04 with OpenSSL 1.1.1 libraries is a bit
unusual. If your goal is to ensure that you can build Python with the
oldest OpenSSL it claims to support, what you're doing makes sense. But
if you have libssl-dev already installed and your Python build complains "Python requires a OpenSSL 1.1.1 or newer", then something weird is
going on, and it's probably worth tracking it down. The best solution
*should* be to install the current libssl-dev package from the package
manager, not to build an old version of OpenSSL from source.

I've built Python-3.12.9 from source on Ubuntu-22.04 with no problems
(I have libssl-dev installed).

To be clear, what is the output of "dpkg -l libssl-dev" on your Ubuntu
24.04 system? If you get something similar to this:

```
$ dpkg -l libssl-dev
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description +++-================-==============-============-================================================
ii libssl-dev:amd64 3.3.1-2ubuntu2 amd64 Secure Sockets Layer toolkit - development files
```

then I don't understand why you'd get the "Python requires a OpenSSL
1.1.1 or newer" message.

--
Keith Thompson (The_Other_Keith) Keith.S.Thompson+u@gmail.com
void Void(void) { Void(); } /* The recursive call of the void */

--- MBSE BBS v1.0.8.4 (Linux-x86_64)
* Origin: None to speak of (3:633/280.2@fidonet)