3.10, 3.11, 3.12: Windows fails to build, test_ssl NOT_ENOUGH_DATA failure on macOS, test_socket fails on Fedora Stable (Linux 7.1)

[vstinner]

There are multiple issues on 3.10, 3.11 and 3.12 branches:

• Windows fails to build on 3.10: PCbuild/find_python.bat downloads a corrupted nuget.exe. The nuget URL should be updated. Fix: commit 106eb53 should be backported.
• test_socket: UDP Lite tests fail on AMD64 Fedora Stable, the machine was rebooted 3 days ago to upgrade to Linux kernel from 7.0 and 7.1, but Linux 7.1 removes UDP Lite support. Fix: commit 3cfc249 should be backported.
• test_ssl fails with NOT_ENOUGH_DATA on macOS. Fix commit acfe02f should be backported.

For test_socket (UDP Lite), I prepared fixes:

• 3.12: [3.12] gh-149776: Skip UDP Lite tests if it's not supported (#149777) #153592
• 3.11: [3.11] gh-149776: Skip UDP Lite tests if it's not supported (#149777) #153593
• 3.10: [3.10] gh-149776: Skip UDP Lite tests if it's not supported (#149777) #153594 -- I included the nuget URL change to fix the Windows CI jobs.

The test_socket issue is not blocked the GitHub Action, only buildbots are failing.

I'm not sure in which order we should fix these issues.

Maybe we should start from test_ssl fixes:

• 3.11: [3.11] gh-100372: Use BIO_eof to detect EOF for SSL_FILETYPE_ASN1 (GH-100373) #153311
• 3.10: [3.10] gh-100372: Use BIO_eof to detect EOF for SSL_FILETYPE_ASN1 (GH-100373) #153312

The Windows and macOS issues block my test_socket PRs since the Windows and macOS jobs fail.

cc @hugovk @encukou

[vstinner]

Oh, test_ssl also fails with NOT_ENOUGH_DATA on the "AMD64 Fedora Stable 3.11" buildbot (OpenSSL 3.5.7 9 Jun 2026): https://buildbot.python.org/#/builders/942/builds/1341

[vstinner]

AMD64 Fedora Stable LTO + PGO: test_large_content_length_truncated() of test_httpservers failed. See: #119452 (comment).

[vstinner]

test_socket also started to fail on "PPC64LE Fedora Stable 3.12"; "aarch64 Fedora Stable 3.12" and "s390x Fedora Stable 3.12" buildbots: the Linux kernel was also upgraded to 7.1 there.

[vstinner]

The "AMD64 Windows11 Non-Debug 3.10" buildbot is also affected by the nuget issue: https://buildbot.python.org/#/builders/918/builds/546

[hugovk]

• 3.10: [3.10] gh-149776: Skip UDP Lite tests if it's not supported (#149777) #153594 -- I included the nuget URL change to fix the Windows CI jobs.

I've opened backport PRs for the #153438 nuget URL fix for 3.12-3.10:

• [3.12] gh-153438: Update NuGet download URL (GH-153482) (GH-153515) #153608
• [3.11] gh-153438: Update NuGet download URL (GH-153482) (GH-153515) #153609
• [3.10] gh-153438: Update NuGet download URL (GH-153482) (GH-153515) #153610

[vstinner]

The problem is that test_ssl fails on your 3.10 and 3.11 PRs. We should combine the nuget and the test_ssl to fix both issues at the same time.

[vstinner]

@pablogsal: As the release manager, how do you want to unblock the situation? Are you ok to fix these issues (nuget, test_socket, test_ssl)?

[pablogsal]

@pablogsal: As the release manager, how do you want to unblock the situation? Are you ok to fix these issues (nuget, test_socket, test_ssl)?

Yes I think I would prefer to fix these issues unless you really advice against.

This weekend I will do a pass to all 3.10/3.11 PRs