gh-117649: Raise ImportError for unsupported modules in free-threaded build

[colesbury]

The free-threaded build does not currently support the combination of single-phase init modules and legacy, non-isolated subinterpreters. Note that with isolated interpreters, single-phase init modules already trigger ImportError.

• Issue: Disable importing legacy single-phase init extensions within subinterpreters in --disable-gil build #117649

[colesbury]

@encukou, I've updated the PR with your suggestions from #117649 (comment).

[encukou]

I didn't get to finish a full review today, submitting what I have so far.

[encukou]

Looks good, thanks!

[ericsnowcurrently]

Aside from possible comments and using "expected failure" in tests, LGTM.

[bedevere-app]

When you're done making the requested changes, leave the comment: I have made the requested changes; please review again.

[colesbury]

Thanks for the review @ericsnowcurrently. I've changed the skips to expected failures and added comments pointing to gh-117649.

I have made the requested changes; please review again

[bedevere-app]

Thanks for making the requested changes!

@encukou, @ericsnowcurrently: please review the changes made to this pull request.

[ericsnowcurrently]

LGTM

Thanks for making those changes. They should really help.

[bedevere-bot]

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot ARM64 MacOS M1 Refleaks NoGIL 3.x has failed when building commit 25f6ff5.

What do you need to do:

1. Don't panic.
2. Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
3. Go to the page of the buildbot that failed (https://buildbot.python.org/all/#builders/1368/builds/710) and take a look at the build logs.
4. Check if the failure is related to this commit (25f6ff5) or if it is a false positive.
5. If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/all/#builders/1368/builds/710

Failed tests:

• test_capi

Failed subtests:

• test_pha_required_nocert - test.test_ssl.TestPostHandshakeAuth.test_pha_required_nocert

Test leaking resources:

• test_capi: file descriptors

Summary of the results of the build (if available):

==

Click to see traceback logs

Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2359, in run msg =self.read() ~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2336, in read returnself.sslconn.read() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1141, in read returnself._sslobj.read(len) ~~~~~~~~~~~~~~~~~^^^^^ ssl.SSLError: [SSL: PEER_DID_NOT_RETURN_A_CERTIFICATE] peer did not return a certificate (_ssl.c:2580) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2359, in run msg =self.read() ~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2336, in read returnself.sslconn.read() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1141, in read returnself._sslobj.read(len) ~~~~~~~~~~~~~~~~~^^^^^ ssl.SSLError: [SSL: PEER_DID_NOT_RETURN_A_CERTIFICATE] peer did not return a certificate (_ssl.c:2580) TLS: (<ssl.SSLSocket fd=7, family=2, type=1, proto=0, laddr=('127.0.0.1', 61554)>, 'read', <TLSVersion.TLSv1_3: 772>, <_TLSContentType.ALERT: 21>, <_TLSAlertType.CERTIFICATE_REQUIRED: 116>, b'\x02t') k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:1020) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLEOFError: [SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1020) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1020) server: new connection from ('127.0.0.1', 61940) server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256) Connection reset by peer: ('127.0.0.1', 61940) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2359, in run msg =self.read() ~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2336, in read returnself.sslconn.read() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1141, in read returnself._sslobj.read(len) ~~~~~~~~~~~~~~~~~^^^^^ ssl.SSLError: [SSL: PEER_DID_NOT_RETURN_A_CERTIFICATE] peer did not return a certificate (_ssl.c:2580) FAIL Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 4538, in test_pha_required_nocertwithself.assertRaisesRegex( ...<11 lines>... s.recv(1024) AssertionError: "certificate required|EOF occurred|closed by the remote host|Connection reset by peer" does not match "[Errno 32] Broken pipe" Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1020) server: new connection from ('127.0.0.1', 63402) server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256) Connection reset by peer: ('127.0.0.1', 63402) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:1020) connection timeout TimeoutError('timed out') connection timeout TimeoutError('timed out') k Traceback (most recent call last): File "<string>", line 10, in <module> File "<frozen importlib._bootstrap>", line 813, in module_from_spec File "<frozen importlib._bootstrap_external>", line 1314, in create_module File "<frozen importlib._bootstrap>", line 488, in _call_with_frames_removedImportError: module _test_module_state_shared does not support loading in subinterpreters xpected failure Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1020) server: new connection from ('127.0.0.1', 63713) server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256) Connection reset by peer: ('127.0.0.1', 63713) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1020) server: new connection from ('127.0.0.1', 60872) server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256) Connection reset by peer: ('127.0.0.1', 60872) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ConnectionResetError: [Errno 54] Connection reset by peer k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:1020) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1020) server: new connection from ('127.0.0.1', 60986) server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256) Connection reset by peer: ('127.0.0.1', 60986) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:1020) connection timeout TimeoutError('timed out') k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1020) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC] decryption failed or bad record mac (_ssl.c:1020) server: new connection from ('127.0.0.1', 60920) server: connection cipher is now ('ECDHE-PSK-CHACHA20-POLY1305', 'TLSv1.2', 256) server: new connection from ('127.0.0.1', 60922) server: connection cipher is now ('ECDHE-PSK-CHACHA20-POLY1305', 'TLSv1.2', 256) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: NO_SUITABLE_KEY_SHARE] no suitable key share (_ssl.c:1020) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC] decryption failed or bad record mac (_ssl.c:1020) connection timeout TimeoutError('timed out') server: new connection from ('127.0.0.1', 61757) server: connection cipher is now ('ECDHE-PSK-CHACHA20-POLY1305', 'TLSv1.2', 256) server: new connection from ('127.0.0.1', 61759) server: connection cipher is now ('ECDHE-PSK-CHACHA20-POLY1305', 'TLSv1.2', 256) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1020) server: new connection from ('127.0.0.1', 61655) server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256) Connection reset by peer: ('127.0.0.1', 61655) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1020) k Traceback (most recent call last): File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/test/test_ssl.py", line 2274, in wrap_conn self.sslconn =self.server.context.wrap_socket( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^self.sock, server_side=True) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 455, in wrap_socket returnself.sslsocket_class._create( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ sock=sock, ^^^^^^^^^^...<5 lines>... session=session ^^^^^^^^^^^^^^^ ) ^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1077, in _create self.do_handshake() ~~~~~~~~~~~~~~~~~^^ File "/Users/ec2-user/buildbot/buildarea/3.x.itamaro-macos-arm64-aws.macos-with-brew.refleak.nogil/build/Lib/ssl.py", line 1363, in do_handshake self._sslobj.do_handshake() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC] decryption failed or bad record mac (_ssl.c:1020) server: new connection from ('127.0.0.1', 63644) server: connection cipher is now ('ECDHE-PSK-CHACHA20-POLY1305', 'TLSv1.2', 256) server: new connection from ('127.0.0.1', 63646) server: connection cipher is now ('ECDHE-PSK-CHACHA20-POLY1305', 'TLSv1.2', 256) k 

[colesbury]

I'm looking into the file descriptor leak (in test_overridden_setting_extensions_subinterp_check)