)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"change_message_id":"0d52bd4535113f0633cf8f6d7d5dbd97fbb11523","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"38c781ad_f2154c3a","updated":"2026-10-05 11:49:57.000000000","message":"@stephenfin@redhat.com , @kajinamit@oss.nttdata.com could you have another look please?","commit_id":"b66c0046372edd1dd1178c4b8e659a05c01665b6"},{"author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"change_message_id":"4e5f340b57c600efe150c85f05b341cad41b9ddd","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"849fe87b_d051aa2d","updated":"2026-10-05 12:29:35.000000000","message":"@stephenfin@redhat.com @kajinamit@oss.nttdata.com ready for another review","commit_id":"73bd2bda369aa0cd686ef1966ecd868e50290194"}],"oslo_service/sslutils.py":[{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"e5111340aa42e232217ff896c6a666e80849397e","unresolved":true,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":"config_section \u003d \u0027ssl\u0027"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"_SSL_PROTOCOLS \u003d {\"sslv23\": ssl.PROTOCOL_SSLv23}"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"_OPTIONAL_PROTOCOLS \u003d {"},{"line_number":40,"context_line":"    \u0027tlsv1\u0027: \u0027PROTOCOL_TLSv1\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"b44634b9_e4ca4bbb","line":37,"range":{"start_line":37,"start_character":18,"end_line":37,"end_character":47},"updated":"2026-10-05 09:54:06.000000000","message":"I wonder if we should move this to optional block, too, assuming this can go away in a near future ?","commit_id":"b66c0046372edd1dd1178c4b8e659a05c01665b6"},{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"cf52b730054aa48ff486ac6dad70725aadc8d354","unresolved":false,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":"config_section \u003d \u0027ssl\u0027"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"_SSL_PROTOCOLS \u003d {\"sslv23\": ssl.PROTOCOL_SSLv23}"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"_OPTIONAL_PROTOCOLS \u003d {"},{"line_number":40,"context_line":"    \u0027tlsv1\u0027: \u0027PROTOCOL_TLSv1\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"3765b9bc_e9848696","line":37,"range":{"start_line":37,"start_character":18,"end_line":37,"end_character":47},"in_reply_to":"5210a4b9_852c48cc","updated":"2026-10-05 12:31:31.000000000","message":"Thanks. I also learned the same after digging into cpython to find out related changes but I think we can anyway make it optional now","commit_id":"b66c0046372edd1dd1178c4b8e659a05c01665b6"},{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"af93a344fe7db5c1c9f5df8b72ebda6fea7ec583","unresolved":true,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":"config_section \u003d \u0027ssl\u0027"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"_SSL_PROTOCOLS \u003d {\"sslv23\": ssl.PROTOCOL_SSLv23}"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"_OPTIONAL_PROTOCOLS \u003d {"},{"line_number":40,"context_line":"    \u0027tlsv1\u0027: \u0027PROTOCOL_TLSv1\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"955ffae7_d185e133","line":37,"range":{"start_line":37,"start_character":18,"end_line":37,"end_character":47},"in_reply_to":"651b3cc5_491deafc","updated":"2026-10-05 12:15:13.000000000","message":"Hmm. An existing bug report for oslo.messaging https://bugs.launchpad.net/oslo.messaging/+bug/2167003 and some quick google searches shows both TLSv1 and SSLv23 were removed in openssl 4.0. If that\u0027s true then I don\u0027t think it\u0027s reasonable to create separate changes for these two.","commit_id":"b66c0046372edd1dd1178c4b8e659a05c01665b6"},{"author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"change_message_id":"6ba87b42e41840ca9174890d7bbb5c41d4d341b8","unresolved":false,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":"config_section \u003d \u0027ssl\u0027"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"_SSL_PROTOCOLS \u003d {\"sslv23\": ssl.PROTOCOL_SSLv23}"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"_OPTIONAL_PROTOCOLS \u003d {"},{"line_number":40,"context_line":"    \u0027tlsv1\u0027: \u0027PROTOCOL_TLSv1\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"5210a4b9_852c48cc","line":37,"in_reply_to":"955ffae7_d185e133","updated":"2026-10-05 12:25:33.000000000","message":"Changed my mind on doing it separately, sslv23 is handled the same way now in the latest PS.\n\nFWIW I don\u0027t think SSLv23 itself is gone though. What OpenSSL 4.0 removed are the fixed version methods (https://github.com/openssl/openssl/pull/30128), SSLv23_method is still an alias for TLS_method in ssl.h. And CPython still defines PROTOCOL_SSLv23 unconditionally, only the PROTOCOL_TLSv1/TLSv1_1/TLSv1_2/SSLv3 constants are dropped with OpenSSL \u003e\u003d 4 (https://github.com/python/cpython/pull/146217). So the description in bug 2167003 isn\u0027t quite right there. Doesn\u0027t matter for the fix anyway.","commit_id":"b66c0046372edd1dd1178c4b8e659a05c01665b6"},{"author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"change_message_id":"68a30582b3f385a26113f528ef31ec272348af3c","unresolved":true,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":"config_section \u003d \u0027ssl\u0027"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"_SSL_PROTOCOLS \u003d {\"sslv23\": ssl.PROTOCOL_SSLv23}"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"_OPTIONAL_PROTOCOLS \u003d {"},{"line_number":40,"context_line":"    \u0027tlsv1\u0027: \u0027PROTOCOL_TLSv1\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"651b3cc5_491deafc","line":37,"range":{"start_line":37,"start_character":18,"end_line":37,"end_character":47},"in_reply_to":"b44634b9_e4ca4bbb","updated":"2026-10-05 11:09:31.000000000","message":"We could, but maybe better in a separate PR with a separate release note ? I would prefer to keep this change minimal just fixing the problem described in the bug report. does that work for you?","commit_id":"b66c0046372edd1dd1178c4b8e659a05c01665b6"}]}