From 2697832d56afd14ade3001d6b7d65618ceb15fa0a4348f01a03151367f80a44f Mon Sep 17 00:00:00 2001
From: Matej Cepl <mcepl@suse.com>
Date: Wed, 6 Mar 2024 21:50:48 +0000
Subject: [PATCH] Accepting request 1155683 from
 home:pmonrealgonzalez:branches:devel:languages:python:Factory

OBS-URL: https://build.opensuse.org/request/show/1155683
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=108
---
 python311.changes | 7 +++++++
 python311.spec    | 3 +++
 2 files changed, 10 insertions(+)

diff --git a/python311.changes b/python311.changes
index 008aa01..ae54db5 100644
--- a/python311.changes
+++ b/python311.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Mar  6 14:13:58 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Use the system-wide crypto-policies [bsc#1211301]
+  * Use the system default cipher list instead of hardcoded values
+  * Add the --with-ssl-default-suites=openssl configure option
+
 -------------------------------------------------------------------
 Fri Feb 23 01:06:42 UTC 2024 - Matej Cepl <mcepl@suse.com>
 
diff --git a/python311.spec b/python311.spec
index 2feb904..1b31f16 100644
--- a/python311.spec
+++ b/python311.spec
@@ -506,6 +506,9 @@ export CFLAGS="%{optflags} -IVendor/"
     --with-system-ffi \
     --with-system-expat \
     --with-lto \
+%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
+    --with-ssl-default-suites=openssl \
+%endif
 %if %{with profileopt}
     --enable-optimizations \
 %endif