Skip to content

gh-136728: Combine OpenSSL and AWS-LC CI configurations#144805

Draft
zware wants to merge 5 commits intopython:mainfrom
zware:bump_multissl_awslc
Draft

gh-136728: Combine OpenSSL and AWS-LC CI configurations#144805
zware wants to merge 5 commits intopython:mainfrom
zware:bump_multissl_awslc

Conversation

@zware
Copy link
Member

@zware zware commented Feb 13, 2026

I accidentally started this before finding GH-143940, but given the somewhat different approach I figured it was worth sharing anyway. If we prefer the GH-143940 approach, this can just be closed.

@zware zware added tests Tests in the Lib/test dir topic-SSL infra CI, GitHub Actions, buildbots, Dependabot, etc. type-refactor Code refactoring (with no changes in behavior) labels Feb 13, 2026
# Keep 1.1.1w in our list despite it being upstream EOL and otherwise
# unsupported as it most resembles other 1.1.1-work-a-like ssl APIs
# supported by important vendors such as AWS-LC.
version: 1.1.1w
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since we actually include AWS-LC tests now, can we remove this note and version?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No objections, let's also ask @picnixz.

Copy link
Member

@hugovk hugovk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, this approach also looks fine by me :)

# Keep 1.1.1w in our list despite it being upstream EOL and otherwise
# unsupported as it most resembles other 1.1.1-work-a-like ssl APIs
# supported by important vendors such as AWS-LC.
version: 1.1.1w
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No objections, let's also ask @picnixz.

Collapse matrix entries into more concise one line each.
Remove obsolete OpenSSL 1.1.1w; AWS-LC is roughly 1.1.1-shaped and
exercises the relevant APIs.
Remove AWS-LC 1.55.0; just test the single latest version.
Copy link
Member

@hugovk hugovk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks both!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting merge infra CI, GitHub Actions, buildbots, Dependabot, etc. skip news tests Tests in the Lib/test dir topic-SSL type-refactor Code refactoring (with no changes in behavior)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants