[IMPALA-9705] Toolchain Python 3 fails to build _ssl and ssl modules

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Component/s: Infrastructure
• Epic Color: ghx-label-2
• Assignee: Unassigned
• Reporter: Laszlo Gaal
• Created: 29/Apr/20 14:35
• Updated: 28/Feb/23 18:13

Description

Reviewing the toolchain build logs found this problem on older OS platforms (Centos7, Ubuntu 14.04) in check/python-3.7.4.log:

Python build finished successfully!
The necessary bits to build these optional modules were not found:
_lzma                 _sqlite3              _ssl               
_tkinter              _uuid                                    
To find the necessary bits, look in setup.py in detect_modules() for the module's name.


The following modules found by detect_modules() in setup.py, have been
built by the Makefile instead, as configured by the Setup files:
_abc                  atexit                pwd                
time                                                           


Could not build the ssl module!
Python requires an OpenSSL 1.0.2 or 1.1 compatible libssl with X509_VERIFY_PARAM_set1_host().
LibreSSL 2.6.4 and earlier do not provide the necessary APIs, https://github.com/libressl-portable/portable/issues/381

Impala is still using Python 2 for impala-virtualenv, so this is not a blocker, but it would block moving to Python 3.

Issue Links

• is related to: IMPALA-11955 Support building without Python 2