As a reminder to anyone out there that's dealing with the TLS 1.2 cutover on python's pypi on macOS 10.12: You may still get stung by it if you end up unfortunately needing to deal with setuptools / easy_install packages that you can't get through pip.
Fortunately, @clburlison took work that I did (github.com/pudquick/tlsssl) and improved upon the build process: github.com/clburlison/ven…
This results in a "tlsssl-1.1.0.pkg" package you can install on 10.12 that will hotfix ssl to support TLS 1.1/1.2 in most situations.
This results in a "tlsssl-1.1.0.pkg" package you can install on 10.12 that will hotfix ssl to support TLS 1.1/1.2 in most situations.
If you install this package on 10.12, it will place a .pth file that will insert /Library/vendored/tlsssl early into sys.path in the system python configuration.
That directory contains a modified form of ssl module which will load instead of the system one.
That directory contains a modified form of ssl module which will load instead of the system one.
The modified one links against openssl 1.0.2 (which was the closest API-wise and still offers TLS 1.1/1.2 support).
You should notice that urllib2.openurl now works against TLS 1.1/1.2 sites 😄
You should notice that urllib2.openurl now works against TLS 1.1/1.2 sites 😄
Note: make sure to do the compile / build of the pkg from a 10.12 machine for this step:
