# Support building ssl and hashlib modules against AWS-LC

**URL:** <https://discuss.python.org/t/support-building-ssl-and-hashlib-modules-against-aws-lc/44505>\
**Category:** Ideas\
**Created:** [January 29, 2024, 10:28pm UTC](https://discuss.python.org/t/support-building-ssl-and-hashlib-modules-against-aws-lc/44505 "2024-01-29T22:28:51Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![WillChilds-Klein](https://avatars.discourse-cdn.com/v4/letter/w/47e85d/32.png) [@WillChilds-Klein](https://discuss.python.org/u/WillChilds-Klein)\
**Post date:** [May 13, 2025, 3:08pm UTC](https://discuss.python.org/t/support-building-ssl-and-hashlib-modules-against-aws-lc/44505/14 "2025-05-13T15:08:26Z")

</div>

Thanks to the support and collaboration of `ssl` module maintainers, as of [PR 133624](https://github.com/python/cpython/pull/133624), mainline CPython is now [fully build- and test-compatible](https://github.com/aws/aws-lc/commit/cd061a43e4b7b454146d3a6136d4b46be1d7191b) with mainline AWS-LC.

As a final step in this integration, I’d like to propose adding an AWS-LC CI job to CPython’s CI alongside [the OpenSSL 3.x tests](https://github.com/python/cpython/blob/076004ae5461cf3a7fe248a38e28afff33acdd14/.github/workflows/build.yml#L267). We’ve tested this integration in AWS-LC’s CI [for well over a year now](https://github.com/aws/aws-lc/pull/1359), and are committed to preserving CPython 3.10+ compatibility in future AWS-LC releases.

Some implementation thoughts:

- The CI job could be marked as “non-required” initially
- Job pins AWS-LC to a specific release/version for stability
- Only test one version and build mode of AWS-LC (i.e. non-FIPS) in CPython’s CI as AWS-LC has plenty such coverage
- Test code [exists](https://github.com/python/cpython/blob/cd2f234ad2ddd95e2d650edac5a6d593c865756a/Tools/ssl/multissltests.py#L447-L453) for testing against non-OpenSSL libssl/libcrypto, namely LibreSSL. This would be easy to extend for AWS-LC

If the community agrees that adding an AWS-LC CI job to CPython’s GitHub is directionally good, I’m happy to post a PR where we can hash out the details.

cc @picnixz @gpshead @encukou

---

_[View the full topic](https://discuss.python.org/t/support-building-ssl-and-hashlib-modules-against-aws-lc/44505)._