Thank you …. this suggestion was a god-send.

I’m trying to build Python 3.7.3 on a Raspberry Pi. I followed your instructions, but still get the following errors:

*** WARNING: renaming "_ssl" since importing it failed: build/lib.linux-armv7l-3.7/_ssl.cpython-37m-arm-linux-gnueabihf.so: undefined symbol: X509_VERIFY_PARAM_set_hostflags

Python build finished successfully!
The necessary bits to build these optional modules were not found:
_uuid
To find the necessary bits, look in setup.py in detect_modules() for the module's name.


The following modules found by detect_modules() in setup.py, have been
built by the Makefile instead, as configured by the Setup files:
_abc                  atexit                pwd
time


Following modules built successfully but were removed because they could not be imported:
_ssl


Could not build the ssl module!
Python requires an OpenSSL 1.0.2 or 1.1 compatible libssl with X509_VERIFY_PARAM_set1_host().
LibreSSL 2.6.4 and earlier do not provide the necessary APIs, https://github.com/libressl-portable/portable/issues/381

James Kiefer
In reply to David
Friday, Apr 26, 2019

Hmm. I can’t tell what the problem is just from that snippet. Maybe if you could copy the log from the entire process and paste it into a gist I might be able to help more.

David
In reply to David
Saturday, Apr 27, 2019

You can download the full log here: https://ufile.io/cpv5sexz

David
In reply to David
Saturday, Apr 27, 2019

I’m not sure if this is of any interest, but the original openssl package is still installed on the Pi. It’s version 1.0.1.

$ /usr/bin/openssl version
OpenSSL 1.0.1t  3 May 2016
$ /usr/local/bin/openssl version
OpenSSL 1.0.2o  27 Mar 2018

I’d like to get rid of the old one and replace it with the new, but the old one is installed / managed by apt-get. Is it safe to just copy my built one on top of it? But then, how do I know what needs copying?

James Kiefer
In reply to David
Saturday, Apr 27, 2019

Yeah, I think that is the problem. The first time I read through your command log I found a line warning about /usr/local but this morning I can’t seem to find it again. Try changing the configure command to point at /usr and see if we get any improvement:

./config shared --prefix=/usr

David
In reply to David
Thursday, May 2, 2019

I ended up just upgrading from Jessie to Stretch, which comes with OpenSSL 1.1.0.

tuongnn
In reply to David
Thursday, Jun 20, 2019

@James Kiefer: Thanks for this post. It helps me alot. I successfully upgraded Python to v3.7.3 on Ubuntu14 32bit (has SSL 1.0.2f). I also faced error “undefined symbol” as David did. (when I compiled same version of openssl as in Ubuntu14) Problem was solved after I changed to use openssl 1.1.

libffi-dev is also needed in the prerequisite dependency. Also, since my GCC is of older version (4.9.2), I need to get rid of “–enable-optimizations” to make it work. After those two fixes, the tutorial works as magic. Thank you!

Reference: https://bugs.python.org/issue35074 https://bugs.python.org/issue31652

René
In reply to Molly
Thursday, Jan 16, 2020

Works exactly the way as Molly said: libffi-dev is not usually a preinstalled package, needs to be added on Debian 8 “Jessie”.

Thanks for this. I spent the whole day trying to get past this issue, trying to distribute software on an older OS version. The lib folder was the last little bit I needed.

These helped me get this BS working :p

export LDFLAGS="-L/usr/local/lib/"

export LD_LIBRARY_PATH="/usr/local/lib/"

export CPPFLAGS="-I/usr/local/include -I/usr/local/include/openssl"

Dear,

It’s works like a charm for Python 3.7.5, OpenSSL 1.1d and Debian8.

Thanks you for your post! Cheers.

Hi! had some trouble with the OpenSSL bit attempting a Python 3.7.6 install.

I used OpenSSL 1.1.0l, so i just changed the so.1.0 files to so.1.1, and before running make on python, i had to run ldconfig so /usr/local/bin/openssl would run properly. also had to run the python ./configure without the –enable-optimizations switch.

i also had an issue with _ctypes module, quicly solved by running apt-get install libffi-dev.

This step really helped! Thank you!

“./configure –with-openssl=/usr/src/openssl-1.0.2o –enable-optimizations”

My OrangePi A64 win+ computer is still processing…. it would not allow me to upgrade python from 3.5.2 and I need 3.6 or better to run numpy and matplotlib. I hope this works cuz nothing else will/would so far. I need to plot pressure readings from 4 BMP280 chips attached to a 4 cylinder motorcycle engines for tuning. I’m gonna make a nice box for the processor and multiplexer. 3D printed the BMP280 chip housings which attach to the carbs. I have a working prototype using a RPi 4. Uses ic2 and a multiplexer. Using python to plot the pressures for each cylinder in sequence as I manually tune the carbs. Many thanks for your efforts regarding the software. Great to know some decent people still exist. I’ll let you know if it worked out for me. Otherwise I’ll junk the orange Pi and get another RPi 4. I had the Orange Pi sitting in a drawer for 4 years doing nothing, bought it for $35, A RPi 4 cost over $150 now. So that’s why I thought i’d try and use it.

Hi, I tried using -shared and the shared libraries were actually created. Try this instead:

./config -shared --prefix=/usr/local/

You are God, my friend. It happened on Debian 8 ARM, I don’t even remember which years I built this server

more details for people interested: https://bugs.python.org/issue34028