diff mbox series

[1/6] python3: upgrade 3.13.9 -> 3.14.0

Message ID 20251204180837.3112045-2-tgamblin@baylibre.com
State New
Headers show
Series python3: upgrade to 3.14.0 | expand

Commit Message

Trevor Gamblin Dec. 4, 2025, 6:08 p.m. UTC
Changelog: https://docs.python.org/3.14/whatsnew/changelog.html#python-3-14-0-final

- Recipe changes:

  - Remove '0001-Generate-data-for-OpenSSL-3.4-and-add-it-to-multissl.patch'
    as this fix was submitted upstream and is included in 3.14.0.

  - Modify three existing patches to apply on 3.14.0:
    - 0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch
    - 0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch
    - 0001-test_active_children-skip-problematic-test.patch

  - Add three new ptest skip patches:
    - 0001-test_cmd-skip-bang-completion-test.patch - editline issues
      with tab completion off of bangs (!).
    - 0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch -
      change in curses dependency in PyREPL leads to issues with a test
      that expects the ICH1 terminal capability.
    - 0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch -
      OE builds customize prefixes and compiler flags in a way that the
      test doesn't expect.

  - Add zstd to the DEPENDS since Python3 now provides support for the
    Zstandard compression standard.

  - In py_package_preprocess(), handle reproducibility issues with the
    _sysconfig_vars*.json files that the build generates by stripping
    paths from them.

Modify python3-manifest.json to reflect the removal/replacement of
stringold with a new string module directory.

Also update python3-dir Python version to 3.14.

Reproducibility looks OK:

|2025-12-03 17:23:39,179 - oe-selftest - INFO - Reproducibility summary for deb: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-03 17:23:39,179 - oe-selftest - INFO - Checking ipk packages for differences...
|2025-12-03 17:23:41,631 - oe-selftest - INFO - Reproducibility summary for ipk: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-03 17:23:41,631 - oe-selftest - INFO - Checking rpm packages for differences...
|2025-12-03 17:23:43,952 - oe-selftest - INFO - Reproducibility summary for rpm: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-03 17:23:43,952 - oe-selftest - INFO -  ... ok
|2025-12-03 17:24:32,829 - oe-selftest - INFO - ----------------------------------------------------------------------
|2025-12-03 17:24:32,830 - oe-selftest - INFO - Ran 1 test in 1616.811s
|2025-12-03 17:24:32,830 - oe-selftest - INFO - OK
|2025-12-03 17:24:36,170 - oe-selftest - INFO - RESULTS:
|2025-12-03 17:24:36,170 - oe-selftest - INFO - RESULTS - reproducible.ReproducibleTests.test_reproducible_builds: PASSED (1567.51s)
|2025-12-03 17:24:38,017 - oe-selftest - INFO - SUMMARY:
|2025-12-03 17:24:38,017 - oe-selftest - INFO - oe-selftest () - Ran 1 test in 1616.811s
|2025-12-03 17:24:38,018 - oe-selftest - INFO - oe-selftest - OK - All required tests passed (successes=1, skipped=0, failures=0, errors=0)

ptests look OK (with new skips):

|== Tests result: SUCCESS ==
|
|28 tests skipped:
|    test.test_asyncio.test_windows_events
|    test.test_asyncio.test_windows_utils test.test_gdb.test_backtrace
|    test.test_gdb.test_cfunction test.test_gdb.test_cfunction_full
|    test.test_gdb.test_misc test.test_gdb.test_pretty_print
|    test_android test_apple test_asdl_parser test_clinic test_devpoll
|    test_free_threading test_generated_cases test_idle test_kqueue
|    test_launcher test_msvcrt test_startfile test_tcl test_tkinter
|    test_ttk test_ttk_textonly test_turtle test_winapi
|    test_winconsoleio test_winreg test_wmi
|
|8 tests skipped (resource denied):
|    test_curses test_peg_generator test_smtpnet test_socketserver
|    test_urllib2net test_urllibnet test_winsound test_zipfile64
|
|455 tests OK.
|
|Total duration: 3 min 5 sec
|Total tests: run=46,110 skipped=2,364
|Total test files: run=483/491 skipped=28 resource_denied=8
|Result: SUCCESS
|DURATION: 186
|END: /usr/lib/python3/ptest
|2025-12-04T00:20
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0

buildall-qemu result:

BUILDALL-QEMU LOG FOR python3
START TIME: 2025-12-03_10:08:36
HOSTNAME: megalith
HOST OS: Fedora Linux 43 (Server Edition)
HOST KERNEL: 6.17.8-300.fc43.x86_64
===============
BUILD RESULTS:
[glibc]
PASS: qemuarm
PASS: qemuarm64
PASS: qemuarmv5
PASS: qemuloongarch64
PASS: qemumips
PASS: qemumips64
PASS: qemuppc
PASS: qemuppc64
PASS: qemuriscv32
PASS: qemuriscv64
PASS: qemux86-64
PASS: qemux86
[musl]
PASS: qemuarm
PASS: qemuarm64
PASS: qemuarmv5
FAIL: qemuloongarch64
PASS: qemumips
PASS: qemumips64
PASS: qemuppc
PASS: qemuppc64
PASS: qemuriscv32
PASS: qemuriscv64
PASS: qemux86-64
PASS: qemux86
===============
PASSED: 23
FAILED: 1

License-Update: Update copyright example in body

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
---
 meta/classes-recipe/python3-dir.bbclass       |    2 +-
 ...r-OpenSSL-3.4-and-add-it-to-multissl.patch | 1452 -----------------
 ...-use-prefix-value-from-build-configu.patch |   35 +-
 ...sts-due-to-load-variability-on-YP-AB.patch |   37 +-
 ...ctive_children-skip-problematic-test.patch |   17 +-
 ...1-test_cmd-skip-bang-completion-test.patch |   31 +
 ...-test_unix_console.test_cursor_back_.patch |   46 +
 ...kip-test_sysconfig.test_sysconfigdat.patch |   32 +
 .../python/python3/python3-manifest.json      |    3 +-
 .../{python3_3.13.9.bb => python3_3.14.0.bb}  |   20 +-
 10 files changed, 191 insertions(+), 1484 deletions(-)
 delete mode 100644 meta/recipes-devtools/python/python3/0001-Generate-data-for-OpenSSL-3.4-and-add-it-to-multissl.patch
 create mode 100644 meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch
 create mode 100644 meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch
 create mode 100644 meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch
 rename meta/recipes-devtools/python/{python3_3.13.9.bb => python3_3.14.0.bb} (95%)
diff mbox series

Patch

diff --git a/meta/classes-recipe/python3-dir.bbclass b/meta/classes-recipe/python3-dir.bbclass
index 0f4e7e7773..3eb0dea9b2 100644
--- a/meta/classes-recipe/python3-dir.bbclass
+++ b/meta/classes-recipe/python3-dir.bbclass
@@ -4,7 +4,7 @@ 
 # SPDX-License-Identifier: MIT
 #
 
-PYTHON_BASEVERSION = "3.13"
+PYTHON_BASEVERSION = "3.14"
 PYTHON_ABI = ""
 PYTHON_DIR = "python${PYTHON_BASEVERSION}"
 PYTHON_PN = "python3"
diff --git a/meta/recipes-devtools/python/python3/0001-Generate-data-for-OpenSSL-3.4-and-add-it-to-multissl.patch b/meta/recipes-devtools/python/python3/0001-Generate-data-for-OpenSSL-3.4-and-add-it-to-multissl.patch
deleted file mode 100644
index 327124e4e3..0000000000
--- a/meta/recipes-devtools/python/python3/0001-Generate-data-for-OpenSSL-3.4-and-add-it-to-multissl.patch
+++ /dev/null
@@ -1,1452 +0,0 @@ 
-From db5c5763f3e3172f1dd011355b41469770dafc0f Mon Sep 17 00:00:00 2001
-From: Petr Viktorin <encukou@gmail.com>
-Date: Thu, 28 Nov 2024 13:29:27 +0100
-Subject: [PATCH] gh-127330: Update for OpenSSL 3.4 & document+improve the
- update process (GH-127331)
-
-- Add `git describe` output to headers generated by `make_ssl_data.py`
-
-  This info is more important than the date when the file was generated.
-  It does mean that the tool now requires a Git checkout of OpenSSL,
-  not for example a release tarball.
-
-- Regenerate the older file to add the info.
-  To the other older file, add a note about manual edits.
-
-- Add notes on how to add a new OpenSSL version
-
-- Add 3.4 error messages and multissl tests
-
-Upstream-Status: Submitted [https://github.com/python/cpython/commit/db5c5763f3e3172f1dd011355b41469770dafc0f]
-Signed-off-by: Peter Marko <peter.marko@siemens.com>
----
- Modules/_ssl.c                             |   2 +-
- Modules/_ssl_data_111.h                    |   4 +-
- Modules/_ssl_data_300.h                    |   5 +-
- Modules/{_ssl_data_31.h => _ssl_data_34.h} | 674 ++++++++++++++++++++-
- Tools/c-analyzer/cpython/_parser.py        |   4 +-
- Tools/ssl/make_ssl_data.py                 |  34 +-
- Tools/ssl/multissltests.py                 |   1 +
- 7 files changed, 714 insertions(+), 10 deletions(-)
- rename Modules/{_ssl_data_31.h => _ssl_data_34.h} (92%)
-
-diff --git a/Modules/_ssl.c b/Modules/_ssl.c
-index b6b5ebf094c..e5b8bf21002 100644
---- a/Modules/_ssl.c
-+++ b/Modules/_ssl.c
-@@ -121,7 +121,7 @@ static void _PySSLFixErrno(void) {
- 
- /* Include generated data (error codes) */
- #if (OPENSSL_VERSION_NUMBER >= 0x30100000L)
--#include "_ssl_data_31.h"
-+#include "_ssl_data_34.h"
- #elif (OPENSSL_VERSION_NUMBER >= 0x30000000L)
- #include "_ssl_data_300.h"
- #elif (OPENSSL_VERSION_NUMBER >= 0x10101000L)
-diff --git a/Modules/_ssl_data_111.h b/Modules/_ssl_data_111.h
-index 093c786e6a2..061fac2bd58 100644
---- a/Modules/_ssl_data_111.h
-+++ b/Modules/_ssl_data_111.h
-@@ -1,4 +1,6 @@
--/* File generated by Tools/ssl/make_ssl_data.py *//* Generated on 2023-06-01T02:58:04.081473 */
-+/* File generated by Tools/ssl/make_ssl_data.py */
-+/* Generated on 2024-11-27T12:48:46.194048+00:00 */
-+/* Generated from Git commit OpenSSL_1_1_1w-0-ge04bd3433f */
- static struct py_ssl_library_code library_codes[] = {
- #ifdef ERR_LIB_ASN1
-     {"ASN1", ERR_LIB_ASN1},
-diff --git a/Modules/_ssl_data_300.h b/Modules/_ssl_data_300.h
-index dc66731f6b6..b687ce43c77 100644
---- a/Modules/_ssl_data_300.h
-+++ b/Modules/_ssl_data_300.h
-@@ -1,4 +1,7 @@
--/* File generated by Tools/ssl/make_ssl_data.py *//* Generated on 2023-06-01T03:03:52.163218 */
-+/* File generated by Tools/ssl/make_ssl_data.py */
-+/* Generated on 2023-06-01T03:03:52.163218 */
-+/* Manually edited to add definitions from 1.1.1 (GH-105174) */
-+
- static struct py_ssl_library_code library_codes[] = {
- #ifdef ERR_LIB_ASN1
-     {"ASN1", ERR_LIB_ASN1},
-diff --git a/Modules/_ssl_data_31.h b/Modules/_ssl_data_34.h
-similarity index 92%
-rename from Modules/_ssl_data_31.h
-rename to Modules/_ssl_data_34.h
-index c589c501f4e..d4af3e1c1fa 100644
---- a/Modules/_ssl_data_31.h
-+++ b/Modules/_ssl_data_34.h
-@@ -1,4 +1,6 @@
--/* File generated by Tools/ssl/make_ssl_data.py *//* Generated on 2023-06-01T03:04:00.275280 */
-+/* File generated by Tools/ssl/make_ssl_data.py */
-+/* Generated on 2024-11-27T12:35:52.276767+00:00 */
-+/* Generated from Git commit openssl-3.4.0-0-g98acb6b028 */
- static struct py_ssl_library_code library_codes[] = {
- #ifdef ERR_LIB_ASN1
-     {"ASN1", ERR_LIB_ASN1},
-@@ -300,6 +302,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"FIRST_NUM_TOO_LARGE", 13, 122},
-   #endif
-+  #ifdef ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT
-+    {"GENERALIZEDTIME_IS_TOO_SHORT", ERR_LIB_ASN1, ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT},
-+  #else
-+    {"GENERALIZEDTIME_IS_TOO_SHORT", 13, 232},
-+  #endif
-   #ifdef ASN1_R_HEADER_TOO_LONG
-     {"HEADER_TOO_LONG", ERR_LIB_ASN1, ASN1_R_HEADER_TOO_LONG},
-   #else
-@@ -730,6 +737,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_TYPE", 13, 196},
-   #endif
-+  #ifdef ASN1_R_UTCTIME_IS_TOO_SHORT
-+    {"UTCTIME_IS_TOO_SHORT", ERR_LIB_ASN1, ASN1_R_UTCTIME_IS_TOO_SHORT},
-+  #else
-+    {"UTCTIME_IS_TOO_SHORT", 13, 233},
-+  #endif
-   #ifdef ASN1_R_WRONG_INTEGER_TYPE
-     {"WRONG_INTEGER_TYPE", ERR_LIB_ASN1, ASN1_R_WRONG_INTEGER_TYPE},
-   #else
-@@ -845,6 +857,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"LISTEN_V6_ONLY", 32, 136},
-   #endif
-+  #ifdef BIO_R_LOCAL_ADDR_NOT_AVAILABLE
-+    {"LOCAL_ADDR_NOT_AVAILABLE", ERR_LIB_BIO, BIO_R_LOCAL_ADDR_NOT_AVAILABLE},
-+  #else
-+    {"LOCAL_ADDR_NOT_AVAILABLE", 32, 111},
-+  #endif
-   #ifdef BIO_R_LOOKUP_RETURNED_NOTHING
-     {"LOOKUP_RETURNED_NOTHING", ERR_LIB_BIO, BIO_R_LOOKUP_RETURNED_NOTHING},
-   #else
-@@ -860,6 +877,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"NBIO_CONNECT_ERROR", 32, 110},
-   #endif
-+  #ifdef BIO_R_NON_FATAL
-+    {"NON_FATAL", ERR_LIB_BIO, BIO_R_NON_FATAL},
-+  #else
-+    {"NON_FATAL", 32, 112},
-+  #endif
-   #ifdef BIO_R_NO_ACCEPT_ADDR_OR_SERVICE_SPECIFIED
-     {"NO_ACCEPT_ADDR_OR_SERVICE_SPECIFIED", ERR_LIB_BIO, BIO_R_NO_ACCEPT_ADDR_OR_SERVICE_SPECIFIED},
-   #else
-@@ -880,6 +902,26 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"NO_SUCH_FILE", 32, 128},
-   #endif
-+  #ifdef BIO_R_PEER_ADDR_NOT_AVAILABLE
-+    {"PEER_ADDR_NOT_AVAILABLE", ERR_LIB_BIO, BIO_R_PEER_ADDR_NOT_AVAILABLE},
-+  #else
-+    {"PEER_ADDR_NOT_AVAILABLE", 32, 114},
-+  #endif
-+  #ifdef BIO_R_PORT_MISMATCH
-+    {"PORT_MISMATCH", ERR_LIB_BIO, BIO_R_PORT_MISMATCH},
-+  #else
-+    {"PORT_MISMATCH", 32, 150},
-+  #endif
-+  #ifdef BIO_R_TFO_DISABLED
-+    {"TFO_DISABLED", ERR_LIB_BIO, BIO_R_TFO_DISABLED},
-+  #else
-+    {"TFO_DISABLED", 32, 106},
-+  #endif
-+  #ifdef BIO_R_TFO_NO_KERNEL_SUPPORT
-+    {"TFO_NO_KERNEL_SUPPORT", ERR_LIB_BIO, BIO_R_TFO_NO_KERNEL_SUPPORT},
-+  #else
-+    {"TFO_NO_KERNEL_SUPPORT", 32, 108},
-+  #endif
-   #ifdef BIO_R_TRANSFER_ERROR
-     {"TRANSFER_ERROR", ERR_LIB_BIO, BIO_R_TRANSFER_ERROR},
-   #else
-@@ -920,6 +962,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNABLE_TO_REUSEADDR", 32, 139},
-   #endif
-+  #ifdef BIO_R_UNABLE_TO_TFO
-+    {"UNABLE_TO_TFO", ERR_LIB_BIO, BIO_R_UNABLE_TO_TFO},
-+  #else
-+    {"UNABLE_TO_TFO", 32, 109},
-+  #endif
-   #ifdef BIO_R_UNAVAILABLE_IP_FAMILY
-     {"UNAVAILABLE_IP_FAMILY", ERR_LIB_BIO, BIO_R_UNAVAILABLE_IP_FAMILY},
-   #else
-@@ -1230,6 +1277,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"ERROR_VALIDATING_SIGNATURE", 58, 171},
-   #endif
-+  #ifdef CMP_R_EXPECTED_POLLREQ
-+    {"EXPECTED_POLLREQ", ERR_LIB_CMP, CMP_R_EXPECTED_POLLREQ},
-+  #else
-+    {"EXPECTED_POLLREQ", 58, 104},
-+  #endif
-   #ifdef CMP_R_FAILED_BUILDING_OWN_CHAIN
-     {"FAILED_BUILDING_OWN_CHAIN", ERR_LIB_CMP, CMP_R_FAILED_BUILDING_OWN_CHAIN},
-   #else
-@@ -1250,16 +1302,51 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"FAIL_INFO_OUT_OF_RANGE", 58, 129},
-   #endif
-+  #ifdef CMP_R_GENERATE_CERTREQTEMPLATE
-+    {"GENERATE_CERTREQTEMPLATE", ERR_LIB_CMP, CMP_R_GENERATE_CERTREQTEMPLATE},
-+  #else
-+    {"GENERATE_CERTREQTEMPLATE", 58, 197},
-+  #endif
-+  #ifdef CMP_R_GENERATE_CRLSTATUS
-+    {"GENERATE_CRLSTATUS", ERR_LIB_CMP, CMP_R_GENERATE_CRLSTATUS},
-+  #else
-+    {"GENERATE_CRLSTATUS", 58, 198},
-+  #endif
-+  #ifdef CMP_R_GETTING_GENP
-+    {"GETTING_GENP", ERR_LIB_CMP, CMP_R_GETTING_GENP},
-+  #else
-+    {"GETTING_GENP", 58, 192},
-+  #endif
-+  #ifdef CMP_R_GET_ITAV
-+    {"GET_ITAV", ERR_LIB_CMP, CMP_R_GET_ITAV},
-+  #else
-+    {"GET_ITAV", 58, 199},
-+  #endif
-   #ifdef CMP_R_INVALID_ARGS
-     {"INVALID_ARGS", ERR_LIB_CMP, CMP_R_INVALID_ARGS},
-   #else
-     {"INVALID_ARGS", 58, 100},
-   #endif
-+  #ifdef CMP_R_INVALID_GENP
-+    {"INVALID_GENP", ERR_LIB_CMP, CMP_R_INVALID_GENP},
-+  #else
-+    {"INVALID_GENP", 58, 193},
-+  #endif
-+  #ifdef CMP_R_INVALID_KEYSPEC
-+    {"INVALID_KEYSPEC", ERR_LIB_CMP, CMP_R_INVALID_KEYSPEC},
-+  #else
-+    {"INVALID_KEYSPEC", 58, 202},
-+  #endif
-   #ifdef CMP_R_INVALID_OPTION
-     {"INVALID_OPTION", ERR_LIB_CMP, CMP_R_INVALID_OPTION},
-   #else
-     {"INVALID_OPTION", 58, 174},
-   #endif
-+  #ifdef CMP_R_INVALID_ROOTCAKEYUPDATE
-+    {"INVALID_ROOTCAKEYUPDATE", ERR_LIB_CMP, CMP_R_INVALID_ROOTCAKEYUPDATE},
-+  #else
-+    {"INVALID_ROOTCAKEYUPDATE", 58, 195},
-+  #endif
-   #ifdef CMP_R_MISSING_CERTID
-     {"MISSING_CERTID", ERR_LIB_CMP, CMP_R_MISSING_CERTID},
-   #else
-@@ -1425,6 +1512,21 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TRANSFER_ERROR", 58, 159},
-   #endif
-+  #ifdef CMP_R_UNCLEAN_CTX
-+    {"UNCLEAN_CTX", ERR_LIB_CMP, CMP_R_UNCLEAN_CTX},
-+  #else
-+    {"UNCLEAN_CTX", 58, 191},
-+  #endif
-+  #ifdef CMP_R_UNEXPECTED_CERTPROFILE
-+    {"UNEXPECTED_CERTPROFILE", ERR_LIB_CMP, CMP_R_UNEXPECTED_CERTPROFILE},
-+  #else
-+    {"UNEXPECTED_CERTPROFILE", 58, 196},
-+  #endif
-+  #ifdef CMP_R_UNEXPECTED_CRLSTATUSLIST
-+    {"UNEXPECTED_CRLSTATUSLIST", ERR_LIB_CMP, CMP_R_UNEXPECTED_CRLSTATUSLIST},
-+  #else
-+    {"UNEXPECTED_CRLSTATUSLIST", 58, 201},
-+  #endif
-   #ifdef CMP_R_UNEXPECTED_PKIBODY
-     {"UNEXPECTED_PKIBODY", ERR_LIB_CMP, CMP_R_UNEXPECTED_PKIBODY},
-   #else
-@@ -1435,11 +1537,21 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNEXPECTED_PKISTATUS", 58, 185},
-   #endif
-+  #ifdef CMP_R_UNEXPECTED_POLLREQ
-+    {"UNEXPECTED_POLLREQ", ERR_LIB_CMP, CMP_R_UNEXPECTED_POLLREQ},
-+  #else
-+    {"UNEXPECTED_POLLREQ", 58, 105},
-+  #endif
-   #ifdef CMP_R_UNEXPECTED_PVNO
-     {"UNEXPECTED_PVNO", ERR_LIB_CMP, CMP_R_UNEXPECTED_PVNO},
-   #else
-     {"UNEXPECTED_PVNO", 58, 153},
-   #endif
-+  #ifdef CMP_R_UNEXPECTED_SENDER
-+    {"UNEXPECTED_SENDER", ERR_LIB_CMP, CMP_R_UNEXPECTED_SENDER},
-+  #else
-+    {"UNEXPECTED_SENDER", 58, 106},
-+  #endif
-   #ifdef CMP_R_UNKNOWN_ALGORITHM_ID
-     {"UNKNOWN_ALGORITHM_ID", ERR_LIB_CMP, CMP_R_UNKNOWN_ALGORITHM_ID},
-   #else
-@@ -1450,6 +1562,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNKNOWN_CERT_TYPE", 58, 135},
-   #endif
-+  #ifdef CMP_R_UNKNOWN_CRL_ISSUER
-+    {"UNKNOWN_CRL_ISSUER", ERR_LIB_CMP, CMP_R_UNKNOWN_CRL_ISSUER},
-+  #else
-+    {"UNKNOWN_CRL_ISSUER", 58, 200},
-+  #endif
-   #ifdef CMP_R_UNKNOWN_PKISTATUS
-     {"UNKNOWN_PKISTATUS", ERR_LIB_CMP, CMP_R_UNKNOWN_PKISTATUS},
-   #else
-@@ -1465,6 +1582,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_KEY_TYPE", 58, 137},
-   #endif
-+  #ifdef CMP_R_UNSUPPORTED_PKIBODY
-+    {"UNSUPPORTED_PKIBODY", ERR_LIB_CMP, CMP_R_UNSUPPORTED_PKIBODY},
-+  #else
-+    {"UNSUPPORTED_PKIBODY", 58, 101},
-+  #endif
-   #ifdef CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC
-     {"UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC", ERR_LIB_CMP, CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC},
-   #else
-@@ -1825,6 +1947,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"NO_SIGNERS", 46, 135},
-   #endif
-+  #ifdef CMS_R_OPERATION_UNSUPPORTED
-+    {"OPERATION_UNSUPPORTED", ERR_LIB_CMS, CMS_R_OPERATION_UNSUPPORTED},
-+  #else
-+    {"OPERATION_UNSUPPORTED", 46, 182},
-+  #endif
-   #ifdef CMS_R_PEER_KEY_ERROR
-     {"PEER_KEY_ERROR", ERR_LIB_CMS, CMS_R_PEER_KEY_ERROR},
-   #else
-@@ -1960,6 +2087,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_RECIPIENT_TYPE", 46, 154},
-   #endif
-+  #ifdef CMS_R_UNSUPPORTED_SIGNATURE_ALGORITHM
-+    {"UNSUPPORTED_SIGNATURE_ALGORITHM", ERR_LIB_CMS, CMS_R_UNSUPPORTED_SIGNATURE_ALGORITHM},
-+  #else
-+    {"UNSUPPORTED_SIGNATURE_ALGORITHM", 46, 195},
-+  #endif
-   #ifdef CMS_R_UNSUPPORTED_TYPE
-     {"UNSUPPORTED_TYPE", ERR_LIB_CMS, CMS_R_UNSUPPORTED_TYPE},
-   #else
-@@ -1985,6 +2117,31 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"WRAP_ERROR", 46, 159},
-   #endif
-+  #ifdef COMP_R_BROTLI_DECODE_ERROR
-+    {"BROTLI_DECODE_ERROR", ERR_LIB_COMP, COMP_R_BROTLI_DECODE_ERROR},
-+  #else
-+    {"BROTLI_DECODE_ERROR", 41, 102},
-+  #endif
-+  #ifdef COMP_R_BROTLI_DEFLATE_ERROR
-+    {"BROTLI_DEFLATE_ERROR", ERR_LIB_COMP, COMP_R_BROTLI_DEFLATE_ERROR},
-+  #else
-+    {"BROTLI_DEFLATE_ERROR", 41, 103},
-+  #endif
-+  #ifdef COMP_R_BROTLI_ENCODE_ERROR
-+    {"BROTLI_ENCODE_ERROR", ERR_LIB_COMP, COMP_R_BROTLI_ENCODE_ERROR},
-+  #else
-+    {"BROTLI_ENCODE_ERROR", 41, 106},
-+  #endif
-+  #ifdef COMP_R_BROTLI_INFLATE_ERROR
-+    {"BROTLI_INFLATE_ERROR", ERR_LIB_COMP, COMP_R_BROTLI_INFLATE_ERROR},
-+  #else
-+    {"BROTLI_INFLATE_ERROR", 41, 104},
-+  #endif
-+  #ifdef COMP_R_BROTLI_NOT_SUPPORTED
-+    {"BROTLI_NOT_SUPPORTED", ERR_LIB_COMP, COMP_R_BROTLI_NOT_SUPPORTED},
-+  #else
-+    {"BROTLI_NOT_SUPPORTED", 41, 105},
-+  #endif
-   #ifdef COMP_R_ZLIB_DEFLATE_ERROR
-     {"ZLIB_DEFLATE_ERROR", ERR_LIB_COMP, COMP_R_ZLIB_DEFLATE_ERROR},
-   #else
-@@ -2000,6 +2157,26 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"ZLIB_NOT_SUPPORTED", 41, 101},
-   #endif
-+  #ifdef COMP_R_ZSTD_COMPRESS_ERROR
-+    {"ZSTD_COMPRESS_ERROR", ERR_LIB_COMP, COMP_R_ZSTD_COMPRESS_ERROR},
-+  #else
-+    {"ZSTD_COMPRESS_ERROR", 41, 107},
-+  #endif
-+  #ifdef COMP_R_ZSTD_DECODE_ERROR
-+    {"ZSTD_DECODE_ERROR", ERR_LIB_COMP, COMP_R_ZSTD_DECODE_ERROR},
-+  #else
-+    {"ZSTD_DECODE_ERROR", 41, 108},
-+  #endif
-+  #ifdef COMP_R_ZSTD_DECOMPRESS_ERROR
-+    {"ZSTD_DECOMPRESS_ERROR", ERR_LIB_COMP, COMP_R_ZSTD_DECOMPRESS_ERROR},
-+  #else
-+    {"ZSTD_DECOMPRESS_ERROR", 41, 109},
-+  #endif
-+  #ifdef COMP_R_ZSTD_NOT_SUPPORTED
-+    {"ZSTD_NOT_SUPPORTED", ERR_LIB_COMP, COMP_R_ZSTD_NOT_SUPPORTED},
-+  #else
-+    {"ZSTD_NOT_SUPPORTED", 41, 110},
-+  #endif
-   #ifdef CONF_R_ERROR_LOADING_DSO
-     {"ERROR_LOADING_DSO", ERR_LIB_CONF, CONF_R_ERROR_LOADING_DSO},
-   #else
-@@ -2085,6 +2262,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"RECURSIVE_DIRECTORY_INCLUDE", 14, 111},
-   #endif
-+  #ifdef CONF_R_RECURSIVE_SECTION_REFERENCE
-+    {"RECURSIVE_SECTION_REFERENCE", ERR_LIB_CONF, CONF_R_RECURSIVE_SECTION_REFERENCE},
-+  #else
-+    {"RECURSIVE_SECTION_REFERENCE", 14, 126},
-+  #endif
-   #ifdef CONF_R_RELATIVE_PATH
-     {"RELATIVE_PATH", ERR_LIB_CONF, CONF_R_RELATIVE_PATH},
-   #else
-@@ -2370,6 +2552,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TOO_MANY_BYTES", 15, 113},
-   #endif
-+  #ifdef CRYPTO_R_TOO_MANY_NAMES
-+    {"TOO_MANY_NAMES", ERR_LIB_CRYPTO, CRYPTO_R_TOO_MANY_NAMES},
-+  #else
-+    {"TOO_MANY_NAMES", 15, 132},
-+  #endif
-   #ifdef CRYPTO_R_TOO_MANY_RECORDS
-     {"TOO_MANY_RECORDS", ERR_LIB_CRYPTO, CRYPTO_R_TOO_MANY_RECORDS},
-   #else
-@@ -2560,6 +2747,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_SECRET", 5, 128},
-   #endif
-+  #ifdef DH_R_INVALID_SIZE
-+    {"INVALID_SIZE", ERR_LIB_DH, DH_R_INVALID_SIZE},
-+  #else
-+    {"INVALID_SIZE", 5, 129},
-+  #endif
-   #ifdef DH_R_KDF_PARAMETER_ERROR
-     {"KDF_PARAMETER_ERROR", ERR_LIB_DH, DH_R_KDF_PARAMETER_ERROR},
-   #else
-@@ -2610,6 +2802,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"PEER_KEY_ERROR", 5, 111},
-   #endif
-+  #ifdef DH_R_Q_TOO_LARGE
-+    {"Q_TOO_LARGE", ERR_LIB_DH, DH_R_Q_TOO_LARGE},
-+  #else
-+    {"Q_TOO_LARGE", 5, 130},
-+  #endif
-   #ifdef DH_R_SHARED_INFO_ERROR
-     {"SHARED_INFO_ERROR", ERR_LIB_DH, DH_R_SHARED_INFO_ERROR},
-   #else
-@@ -3545,6 +3742,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"GENERATE_ERROR", 6, 214},
-   #endif
-+  #ifdef EVP_R_GETTING_ALGORITHMIDENTIFIER_NOT_SUPPORTED
-+    {"GETTING_ALGORITHMIDENTIFIER_NOT_SUPPORTED", ERR_LIB_EVP, EVP_R_GETTING_ALGORITHMIDENTIFIER_NOT_SUPPORTED},
-+  #else
-+    {"GETTING_ALGORITHMIDENTIFIER_NOT_SUPPORTED", 6, 229},
-+  #endif
-   #ifdef EVP_R_GET_RAW_KEY_FAILED
-     {"GET_RAW_KEY_FAILED", ERR_LIB_EVP, EVP_R_GET_RAW_KEY_FAILED},
-   #else
-@@ -3745,6 +3947,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE", 6, 150},
-   #endif
-+  #ifdef EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_SIGNATURE_TYPE
-+    {"OPERATION_NOT_SUPPORTED_FOR_THIS_SIGNATURE_TYPE", ERR_LIB_EVP, EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_SIGNATURE_TYPE},
-+  #else
-+    {"OPERATION_NOT_SUPPORTED_FOR_THIS_SIGNATURE_TYPE", 6, 226},
-+  #endif
-   #ifdef EVP_R_OUTPUT_WOULD_OVERFLOW
-     {"OUTPUT_WOULD_OVERFLOW", ERR_LIB_EVP, EVP_R_OUTPUT_WOULD_OVERFLOW},
-   #else
-@@ -3795,6 +4002,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"SET_DEFAULT_PROPERTY_FAILURE", 6, 209},
-   #endif
-+  #ifdef EVP_R_SIGNATURE_TYPE_AND_KEY_TYPE_INCOMPATIBLE
-+    {"SIGNATURE_TYPE_AND_KEY_TYPE_INCOMPATIBLE", ERR_LIB_EVP, EVP_R_SIGNATURE_TYPE_AND_KEY_TYPE_INCOMPATIBLE},
-+  #else
-+    {"SIGNATURE_TYPE_AND_KEY_TYPE_INCOMPATIBLE", 6, 228},
-+  #endif
-   #ifdef EVP_R_TOO_MANY_RECORDS
-     {"TOO_MANY_RECORDS", ERR_LIB_EVP, EVP_R_TOO_MANY_RECORDS},
-   #else
-@@ -3825,6 +4037,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNABLE_TO_SET_CALLBACKS", 6, 217},
-   #endif
-+  #ifdef EVP_R_UNKNOWN_BITS
-+    {"UNKNOWN_BITS", ERR_LIB_EVP, EVP_R_UNKNOWN_BITS},
-+  #else
-+    {"UNKNOWN_BITS", 6, 166},
-+  #endif
-   #ifdef EVP_R_UNKNOWN_CIPHER
-     {"UNKNOWN_CIPHER", ERR_LIB_EVP, EVP_R_UNKNOWN_CIPHER},
-   #else
-@@ -3840,6 +4057,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNKNOWN_KEY_TYPE", 6, 207},
-   #endif
-+  #ifdef EVP_R_UNKNOWN_MAX_SIZE
-+    {"UNKNOWN_MAX_SIZE", ERR_LIB_EVP, EVP_R_UNKNOWN_MAX_SIZE},
-+  #else
-+    {"UNKNOWN_MAX_SIZE", 6, 167},
-+  #endif
-   #ifdef EVP_R_UNKNOWN_OPTION
-     {"UNKNOWN_OPTION", ERR_LIB_EVP, EVP_R_UNKNOWN_OPTION},
-   #else
-@@ -3850,6 +4072,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNKNOWN_PBE_ALGORITHM", 6, 121},
-   #endif
-+  #ifdef EVP_R_UNKNOWN_SECURITY_BITS
-+    {"UNKNOWN_SECURITY_BITS", ERR_LIB_EVP, EVP_R_UNKNOWN_SECURITY_BITS},
-+  #else
-+    {"UNKNOWN_SECURITY_BITS", 6, 168},
-+  #endif
-   #ifdef EVP_R_UNSUPPORTED_ALGORITHM
-     {"UNSUPPORTED_ALGORITHM", ERR_LIB_EVP, EVP_R_UNSUPPORTED_ALGORITHM},
-   #else
-@@ -4040,6 +4267,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"RESPONSE_PARSE_ERROR", 61, 104},
-   #endif
-+  #ifdef HTTP_R_RESPONSE_TOO_MANY_HDRLINES
-+    {"RESPONSE_TOO_MANY_HDRLINES", ERR_LIB_HTTP, HTTP_R_RESPONSE_TOO_MANY_HDRLINES},
-+  #else
-+    {"RESPONSE_TOO_MANY_HDRLINES", 61, 130},
-+  #endif
-   #ifdef HTTP_R_RETRY_TIMEOUT
-     {"RETRY_TIMEOUT", ERR_LIB_HTTP, HTTP_R_RETRY_TIMEOUT},
-   #else
-@@ -4530,6 +4762,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_PUBLIC_KEY_TYPE", 9, 110},
-   #endif
-+  #ifdef PKCS12_R_CALLBACK_FAILED
-+    {"CALLBACK_FAILED", ERR_LIB_PKCS12, PKCS12_R_CALLBACK_FAILED},
-+  #else
-+    {"CALLBACK_FAILED", 35, 115},
-+  #endif
-   #ifdef PKCS12_R_CANT_PACK_STRUCTURE
-     {"CANT_PACK_STRUCTURE", ERR_LIB_PKCS12, PKCS12_R_CANT_PACK_STRUCTURE},
-   #else
-@@ -4920,6 +5157,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"CIPHER_OPERATION_FAILED", 57, 102},
-   #endif
-+  #ifdef PROV_R_COFACTOR_REQUIRED
-+    {"COFACTOR_REQUIRED", ERR_LIB_PROV, PROV_R_COFACTOR_REQUIRED},
-+  #else
-+    {"COFACTOR_REQUIRED", 57, 236},
-+  #endif
-   #ifdef PROV_R_DERIVATION_FUNCTION_INIT_FAILED
-     {"DERIVATION_FUNCTION_INIT_FAILED", ERR_LIB_PROV, PROV_R_DERIVATION_FUNCTION_INIT_FAILED},
-   #else
-@@ -4935,6 +5177,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"EMS_NOT_ENABLED", 57, 233},
-   #endif
-+  #ifdef PROV_R_ENTROPY_SOURCE_FAILED_CONTINUOUS_TESTS
-+    {"ENTROPY_SOURCE_FAILED_CONTINUOUS_TESTS", ERR_LIB_PROV, PROV_R_ENTROPY_SOURCE_FAILED_CONTINUOUS_TESTS},
-+  #else
-+    {"ENTROPY_SOURCE_FAILED_CONTINUOUS_TESTS", 57, 244},
-+  #endif
-   #ifdef PROV_R_ENTROPY_SOURCE_STRENGTH_TOO_WEAK
-     {"ENTROPY_SOURCE_STRENGTH_TOO_WEAK", ERR_LIB_PROV, PROV_R_ENTROPY_SOURCE_STRENGTH_TOO_WEAK},
-   #else
-@@ -4990,6 +5237,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"FAILED_TO_SIGN", 57, 175},
-   #endif
-+  #ifdef PROV_R_FINAL_CALL_OUT_OF_ORDER
-+    {"FINAL_CALL_OUT_OF_ORDER", ERR_LIB_PROV, PROV_R_FINAL_CALL_OUT_OF_ORDER},
-+  #else
-+    {"FINAL_CALL_OUT_OF_ORDER", 57, 237},
-+  #endif
-   #ifdef PROV_R_FIPS_MODULE_CONDITIONAL_ERROR
-     {"FIPS_MODULE_CONDITIONAL_ERROR", ERR_LIB_PROV, PROV_R_FIPS_MODULE_CONDITIONAL_ERROR},
-   #else
-@@ -5020,6 +5272,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INDICATOR_INTEGRITY_FAILURE", 57, 210},
-   #endif
-+  #ifdef PROV_R_INIT_CALL_OUT_OF_ORDER
-+    {"INIT_CALL_OUT_OF_ORDER", ERR_LIB_PROV, PROV_R_INIT_CALL_OUT_OF_ORDER},
-+  #else
-+    {"INIT_CALL_OUT_OF_ORDER", 57, 238},
-+  #endif
-   #ifdef PROV_R_INSUFFICIENT_DRBG_STRENGTH
-     {"INSUFFICIENT_DRBG_STRENGTH", ERR_LIB_PROV, PROV_R_INSUFFICIENT_DRBG_STRENGTH},
-   #else
-@@ -5030,6 +5287,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_AAD", 57, 108},
-   #endif
-+  #ifdef PROV_R_INVALID_AEAD
-+    {"INVALID_AEAD", ERR_LIB_PROV, PROV_R_INVALID_AEAD},
-+  #else
-+    {"INVALID_AEAD", 57, 231},
-+  #endif
-   #ifdef PROV_R_INVALID_CONFIG_DATA
-     {"INVALID_CONFIG_DATA", ERR_LIB_PROV, PROV_R_INVALID_CONFIG_DATA},
-   #else
-@@ -5070,6 +5332,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_DIGEST_SIZE", 57, 218},
-   #endif
-+  #ifdef PROV_R_INVALID_EDDSA_INSTANCE_FOR_ATTEMPTED_OPERATION
-+    {"INVALID_EDDSA_INSTANCE_FOR_ATTEMPTED_OPERATION", ERR_LIB_PROV, PROV_R_INVALID_EDDSA_INSTANCE_FOR_ATTEMPTED_OPERATION},
-+  #else
-+    {"INVALID_EDDSA_INSTANCE_FOR_ATTEMPTED_OPERATION", 57, 243},
-+  #endif
-   #ifdef PROV_R_INVALID_INPUT_LENGTH
-     {"INVALID_INPUT_LENGTH", ERR_LIB_PROV, PROV_R_INVALID_INPUT_LENGTH},
-   #else
-@@ -5085,6 +5352,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_IV_LENGTH", 57, 109},
-   #endif
-+  #ifdef PROV_R_INVALID_KDF
-+    {"INVALID_KDF", ERR_LIB_PROV, PROV_R_INVALID_KDF},
-+  #else
-+    {"INVALID_KDF", 57, 232},
-+  #endif
-   #ifdef PROV_R_INVALID_KEY
-     {"INVALID_KEY", ERR_LIB_PROV, PROV_R_INVALID_KEY},
-   #else
-@@ -5100,6 +5372,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_MAC", 57, 151},
-   #endif
-+  #ifdef PROV_R_INVALID_MEMORY_SIZE
-+    {"INVALID_MEMORY_SIZE", ERR_LIB_PROV, PROV_R_INVALID_MEMORY_SIZE},
-+  #else
-+    {"INVALID_MEMORY_SIZE", 57, 235},
-+  #endif
-   #ifdef PROV_R_INVALID_MGF1_MD
-     {"INVALID_MGF1_MD", ERR_LIB_PROV, PROV_R_INVALID_MGF1_MD},
-   #else
-@@ -5120,6 +5397,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_PADDING_MODE", 57, 168},
-   #endif
-+  #ifdef PROV_R_INVALID_PREHASHED_DIGEST_LENGTH
-+    {"INVALID_PREHASHED_DIGEST_LENGTH", ERR_LIB_PROV, PROV_R_INVALID_PREHASHED_DIGEST_LENGTH},
-+  #else
-+    {"INVALID_PREHASHED_DIGEST_LENGTH", 57, 241},
-+  #endif
-   #ifdef PROV_R_INVALID_PUBINFO
-     {"INVALID_PUBINFO", ERR_LIB_PROV, PROV_R_INVALID_PUBINFO},
-   #else
-@@ -5155,6 +5437,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_TAG_LENGTH", 57, 118},
-   #endif
-+  #ifdef PROV_R_INVALID_THREAD_POOL_SIZE
-+    {"INVALID_THREAD_POOL_SIZE", ERR_LIB_PROV, PROV_R_INVALID_THREAD_POOL_SIZE},
-+  #else
-+    {"INVALID_THREAD_POOL_SIZE", 57, 234},
-+  #endif
-   #ifdef PROV_R_INVALID_UKM_LENGTH
-     {"INVALID_UKM_LENGTH", ERR_LIB_PROV, PROV_R_INVALID_UKM_LENGTH},
-   #else
-@@ -5300,6 +5587,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"NOT_XOF_OR_INVALID_LENGTH", 57, 113},
-   #endif
-+  #ifdef PROV_R_NO_INSTANCE_ALLOWED
-+    {"NO_INSTANCE_ALLOWED", ERR_LIB_PROV, PROV_R_NO_INSTANCE_ALLOWED},
-+  #else
-+    {"NO_INSTANCE_ALLOWED", 57, 242},
-+  #endif
-   #ifdef PROV_R_NO_KEY_SET
-     {"NO_KEY_SET", ERR_LIB_PROV, PROV_R_NO_KEY_SET},
-   #else
-@@ -5310,6 +5602,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"NO_PARAMETERS_SET", 57, 177},
-   #endif
-+  #ifdef PROV_R_ONESHOT_CALL_OUT_OF_ORDER
-+    {"ONESHOT_CALL_OUT_OF_ORDER", ERR_LIB_PROV, PROV_R_ONESHOT_CALL_OUT_OF_ORDER},
-+  #else
-+    {"ONESHOT_CALL_OUT_OF_ORDER", 57, 239},
-+  #endif
-   #ifdef PROV_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE
-     {"OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE", ERR_LIB_PROV, PROV_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE},
-   #else
-@@ -5460,6 +5757,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_NUMBER_OF_ROUNDS", 57, 152},
-   #endif
-+  #ifdef PROV_R_UPDATE_CALL_OUT_OF_ORDER
-+    {"UPDATE_CALL_OUT_OF_ORDER", ERR_LIB_PROV, PROV_R_UPDATE_CALL_OUT_OF_ORDER},
-+  #else
-+    {"UPDATE_CALL_OUT_OF_ORDER", 57, 240},
-+  #endif
-   #ifdef PROV_R_URI_AUTHORITY_UNSUPPORTED
-     {"URI_AUTHORITY_UNSUPPORTED", ERR_LIB_PROV, PROV_R_URI_AUTHORITY_UNSUPPORTED},
-   #else
-@@ -5595,6 +5897,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INTERNAL_ERROR", 36, 113},
-   #endif
-+  #ifdef RAND_R_INVALID_PROPERTY_QUERY
-+    {"INVALID_PROPERTY_QUERY", ERR_LIB_RAND, RAND_R_INVALID_PROPERTY_QUERY},
-+  #else
-+    {"INVALID_PROPERTY_QUERY", 36, 137},
-+  #endif
-   #ifdef RAND_R_IN_ERROR_STATE
-     {"IN_ERROR_STATE", ERR_LIB_RAND, RAND_R_IN_ERROR_STATE},
-   #else
-@@ -6210,6 +6517,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"AT_LEAST_TLS_1_2_NEEDED_IN_SUITEB_MODE", 20, 158},
-   #endif
-+  #ifdef SSL_R_BAD_CERTIFICATE
-+    {"BAD_CERTIFICATE", ERR_LIB_SSL, SSL_R_BAD_CERTIFICATE},
-+  #else
-+    {"BAD_CERTIFICATE", 20, 348},
-+  #endif
-   #ifdef SSL_R_BAD_CHANGE_CIPHER_SPEC
-     {"BAD_CHANGE_CIPHER_SPEC", ERR_LIB_SSL, SSL_R_BAD_CHANGE_CIPHER_SPEC},
-   #else
-@@ -6220,6 +6532,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"BAD_CIPHER", 20, 186},
-   #endif
-+  #ifdef SSL_R_BAD_COMPRESSION_ALGORITHM
-+    {"BAD_COMPRESSION_ALGORITHM", ERR_LIB_SSL, SSL_R_BAD_COMPRESSION_ALGORITHM},
-+  #else
-+    {"BAD_COMPRESSION_ALGORITHM", 20, 326},
-+  #endif
-   #ifdef SSL_R_BAD_DATA
-     {"BAD_DATA", ERR_LIB_SSL, SSL_R_BAD_DATA},
-   #else
-@@ -6495,6 +6812,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"CONNECTION_TYPE_NOT_SET", 20, 144},
-   #endif
-+  #ifdef SSL_R_CONN_USE_ONLY
-+    {"CONN_USE_ONLY", ERR_LIB_SSL, SSL_R_CONN_USE_ONLY},
-+  #else
-+    {"CONN_USE_ONLY", 20, 356},
-+  #endif
-   #ifdef SSL_R_CONTEXT_NOT_DANE_ENABLED
-     {"CONTEXT_NOT_DANE_ENABLED", ERR_LIB_SSL, SSL_R_CONTEXT_NOT_DANE_ENABLED},
-   #else
-@@ -6635,6 +6957,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"EE_KEY_TOO_SMALL", 20, 399},
-   #endif
-+  #ifdef SSL_R_EMPTY_RAW_PUBLIC_KEY
-+    {"EMPTY_RAW_PUBLIC_KEY", ERR_LIB_SSL, SSL_R_EMPTY_RAW_PUBLIC_KEY},
-+  #else
-+    {"EMPTY_RAW_PUBLIC_KEY", 20, 349},
-+  #endif
-   #ifdef SSL_R_EMPTY_SRTP_PROTECTION_PROFILE_LIST
-     {"EMPTY_SRTP_PROTECTION_PROFILE_LIST", ERR_LIB_SSL, SSL_R_EMPTY_SRTP_PROTECTION_PROFILE_LIST},
-   #else
-@@ -6650,6 +6977,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"ERROR_IN_RECEIVED_CIPHER_LIST", 20, 151},
-   #endif
-+  #ifdef SSL_R_ERROR_IN_SYSTEM_DEFAULT_CONFIG
-+    {"ERROR_IN_SYSTEM_DEFAULT_CONFIG", ERR_LIB_SSL, SSL_R_ERROR_IN_SYSTEM_DEFAULT_CONFIG},
-+  #else
-+    {"ERROR_IN_SYSTEM_DEFAULT_CONFIG", 20, 419},
-+  #endif
-   #ifdef SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN
-     {"ERROR_SETTING_TLSA_BASE_DOMAIN", ERR_LIB_SSL, SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN},
-   #else
-@@ -6680,11 +7012,26 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"EXT_LENGTH_MISMATCH", 20, 163},
-   #endif
-+  #ifdef SSL_R_FAILED_TO_GET_PARAMETER
-+    {"FAILED_TO_GET_PARAMETER", ERR_LIB_SSL, SSL_R_FAILED_TO_GET_PARAMETER},
-+  #else
-+    {"FAILED_TO_GET_PARAMETER", 20, 316},
-+  #endif
-   #ifdef SSL_R_FAILED_TO_INIT_ASYNC
-     {"FAILED_TO_INIT_ASYNC", ERR_LIB_SSL, SSL_R_FAILED_TO_INIT_ASYNC},
-   #else
-     {"FAILED_TO_INIT_ASYNC", 20, 405},
-   #endif
-+  #ifdef SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE
-+    {"FEATURE_NEGOTIATION_NOT_COMPLETE", ERR_LIB_SSL, SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE},
-+  #else
-+    {"FEATURE_NEGOTIATION_NOT_COMPLETE", 20, 417},
-+  #endif
-+  #ifdef SSL_R_FEATURE_NOT_RENEGOTIABLE
-+    {"FEATURE_NOT_RENEGOTIABLE", ERR_LIB_SSL, SSL_R_FEATURE_NOT_RENEGOTIABLE},
-+  #else
-+    {"FEATURE_NOT_RENEGOTIABLE", 20, 413},
-+  #endif
-   #ifdef SSL_R_FRAGMENTED_CLIENT_HELLO
-     {"FRAGMENTED_CLIENT_HELLO", ERR_LIB_SSL, SSL_R_FRAGMENTED_CLIENT_HELLO},
-   #else
-@@ -6805,6 +7152,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"INVALID_NULL_CMD_NAME", 20, 385},
-   #endif
-+  #ifdef SSL_R_INVALID_RAW_PUBLIC_KEY
-+    {"INVALID_RAW_PUBLIC_KEY", ERR_LIB_SSL, SSL_R_INVALID_RAW_PUBLIC_KEY},
-+  #else
-+    {"INVALID_RAW_PUBLIC_KEY", 20, 350},
-+  #endif
-+  #ifdef SSL_R_INVALID_RECORD
-+    {"INVALID_RECORD", ERR_LIB_SSL, SSL_R_INVALID_RECORD},
-+  #else
-+    {"INVALID_RECORD", 20, 317},
-+  #endif
-   #ifdef SSL_R_INVALID_SEQUENCE_NUMBER
-     {"INVALID_SEQUENCE_NUMBER", ERR_LIB_SSL, SSL_R_INVALID_SEQUENCE_NUMBER},
-   #else
-@@ -6865,6 +7222,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"LIBRARY_HAS_NO_CIPHERS", 20, 161},
-   #endif
-+  #ifdef SSL_R_MAXIMUM_ENCRYPTED_PKTS_REACHED
-+    {"MAXIMUM_ENCRYPTED_PKTS_REACHED", ERR_LIB_SSL, SSL_R_MAXIMUM_ENCRYPTED_PKTS_REACHED},
-+  #else
-+    {"MAXIMUM_ENCRYPTED_PKTS_REACHED", 20, 395},
-+  #endif
-   #ifdef SSL_R_MISSING_DSA_SIGNING_CERT
-     {"MISSING_DSA_SIGNING_CERT", ERR_LIB_SSL, SSL_R_MISSING_DSA_SIGNING_CERT},
-   #else
-@@ -6925,6 +7287,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"MISSING_SUPPORTED_GROUPS_EXTENSION", 20, 209},
-   #endif
-+  #ifdef SSL_R_MISSING_SUPPORTED_VERSIONS_EXTENSION
-+    {"MISSING_SUPPORTED_VERSIONS_EXTENSION", ERR_LIB_SSL, SSL_R_MISSING_SUPPORTED_VERSIONS_EXTENSION},
-+  #else
-+    {"MISSING_SUPPORTED_VERSIONS_EXTENSION", 20, 420},
-+  #endif
-   #ifdef SSL_R_MISSING_TMP_DH_KEY
-     {"MISSING_TMP_DH_KEY", ERR_LIB_SSL, SSL_R_MISSING_TMP_DH_KEY},
-   #else
-@@ -7065,6 +7432,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"NO_SRTP_PROFILES", 20, 359},
-   #endif
-+  #ifdef SSL_R_NO_STREAM
-+    {"NO_STREAM", ERR_LIB_SSL, SSL_R_NO_STREAM},
-+  #else
-+    {"NO_STREAM", 20, 355},
-+  #endif
-   #ifdef SSL_R_NO_SUITABLE_DIGEST_ALGORITHM
-     {"NO_SUITABLE_DIGEST_ALGORITHM", ERR_LIB_SSL, SSL_R_NO_SUITABLE_DIGEST_ALGORITHM},
-   #else
-@@ -7080,6 +7452,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"NO_SUITABLE_KEY_SHARE", 20, 101},
-   #endif
-+  #ifdef SSL_R_NO_SUITABLE_RECORD_LAYER
-+    {"NO_SUITABLE_RECORD_LAYER", ERR_LIB_SSL, SSL_R_NO_SUITABLE_RECORD_LAYER},
-+  #else
-+    {"NO_SUITABLE_RECORD_LAYER", 20, 322},
-+  #endif
-   #ifdef SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM
-     {"NO_SUITABLE_SIGNATURE_ALGORITHM", ERR_LIB_SSL, SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM},
-   #else
-@@ -7160,6 +7537,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"PIPELINE_FAILURE", 20, 406},
-   #endif
-+  #ifdef SSL_R_POLL_REQUEST_NOT_SUPPORTED
-+    {"POLL_REQUEST_NOT_SUPPORTED", ERR_LIB_SSL, SSL_R_POLL_REQUEST_NOT_SUPPORTED},
-+  #else
-+    {"POLL_REQUEST_NOT_SUPPORTED", 20, 418},
-+  #endif
-   #ifdef SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR
-     {"POST_HANDSHAKE_AUTH_ENCODING_ERR", ERR_LIB_SSL, SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR},
-   #else
-@@ -7190,6 +7572,21 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"PSK_NO_SERVER_CB", 20, 225},
-   #endif
-+  #ifdef SSL_R_QUIC_HANDSHAKE_LAYER_ERROR
-+    {"QUIC_HANDSHAKE_LAYER_ERROR", ERR_LIB_SSL, SSL_R_QUIC_HANDSHAKE_LAYER_ERROR},
-+  #else
-+    {"QUIC_HANDSHAKE_LAYER_ERROR", 20, 393},
-+  #endif
-+  #ifdef SSL_R_QUIC_NETWORK_ERROR
-+    {"QUIC_NETWORK_ERROR", ERR_LIB_SSL, SSL_R_QUIC_NETWORK_ERROR},
-+  #else
-+    {"QUIC_NETWORK_ERROR", 20, 387},
-+  #endif
-+  #ifdef SSL_R_QUIC_PROTOCOL_ERROR
-+    {"QUIC_PROTOCOL_ERROR", ERR_LIB_SSL, SSL_R_QUIC_PROTOCOL_ERROR},
-+  #else
-+    {"QUIC_PROTOCOL_ERROR", 20, 382},
-+  #endif
-   #ifdef SSL_R_READ_BIO_NOT_SET
-     {"READ_BIO_NOT_SET", ERR_LIB_SSL, SSL_R_READ_BIO_NOT_SET},
-   #else
-@@ -7200,6 +7597,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"READ_TIMEOUT_EXPIRED", 20, 312},
-   #endif
-+  #ifdef SSL_R_RECORDS_NOT_RELEASED
-+    {"RECORDS_NOT_RELEASED", ERR_LIB_SSL, SSL_R_RECORDS_NOT_RELEASED},
-+  #else
-+    {"RECORDS_NOT_RELEASED", 20, 321},
-+  #endif
-+  #ifdef SSL_R_RECORD_LAYER_FAILURE
-+    {"RECORD_LAYER_FAILURE", ERR_LIB_SSL, SSL_R_RECORD_LAYER_FAILURE},
-+  #else
-+    {"RECORD_LAYER_FAILURE", 20, 313},
-+  #endif
-   #ifdef SSL_R_RECORD_LENGTH_MISMATCH
-     {"RECORD_LENGTH_MISMATCH", ERR_LIB_SSL, SSL_R_RECORD_LENGTH_MISMATCH},
-   #else
-@@ -7210,6 +7617,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"RECORD_TOO_SMALL", 20, 298},
-   #endif
-+  #ifdef SSL_R_REMOTE_PEER_ADDRESS_NOT_SET
-+    {"REMOTE_PEER_ADDRESS_NOT_SET", ERR_LIB_SSL, SSL_R_REMOTE_PEER_ADDRESS_NOT_SET},
-+  #else
-+    {"REMOTE_PEER_ADDRESS_NOT_SET", 20, 346},
-+  #endif
-   #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG
-     {"RENEGOTIATE_EXT_TOO_LONG", ERR_LIB_SSL, SSL_R_RENEGOTIATE_EXT_TOO_LONG},
-   #else
-@@ -7255,6 +7667,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"SCT_VERIFICATION_FAILED", 20, 208},
-   #endif
-+  #ifdef SSL_R_SEQUENCE_CTR_WRAPPED
-+    {"SEQUENCE_CTR_WRAPPED", ERR_LIB_SSL, SSL_R_SEQUENCE_CTR_WRAPPED},
-+  #else
-+    {"SEQUENCE_CTR_WRAPPED", 20, 327},
-+  #endif
-   #ifdef SSL_R_SERVERHELLO_TLSEXT
-     {"SERVERHELLO_TLSEXT", ERR_LIB_SSL, SSL_R_SERVERHELLO_TLSEXT},
-   #else
-@@ -7325,6 +7742,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"SSLV3_ALERT_BAD_CERTIFICATE", 20, 1042},
-   #endif
-+  #ifdef SSL_R_SSLV3_ALERT_BAD_CERTIFICATE
-+    {"SSLV3_ALERT_BAD_CERTIFICATE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_BAD_CERTIFICATE},
-+  #else
-+    {"SSLV3_ALERT_BAD_CERTIFICATE", 20, 1042},
-+  #endif
-+  #ifdef SSL_R_SSLV3_ALERT_BAD_RECORD_MAC
-+    {"SSLV3_ALERT_BAD_RECORD_MAC", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_BAD_RECORD_MAC},
-+  #else
-+    {"SSLV3_ALERT_BAD_RECORD_MAC", 20, 1020},
-+  #endif
-   #ifdef SSL_R_SSLV3_ALERT_BAD_RECORD_MAC
-     {"SSLV3_ALERT_BAD_RECORD_MAC", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_BAD_RECORD_MAC},
-   #else
-@@ -7335,11 +7762,26 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"SSLV3_ALERT_CERTIFICATE_EXPIRED", 20, 1045},
-   #endif
-+  #ifdef SSL_R_SSLV3_ALERT_CERTIFICATE_EXPIRED
-+    {"SSLV3_ALERT_CERTIFICATE_EXPIRED", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_CERTIFICATE_EXPIRED},
-+  #else
-+    {"SSLV3_ALERT_CERTIFICATE_EXPIRED", 20, 1045},
-+  #endif
-   #ifdef SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED
-     {"SSLV3_ALERT_CERTIFICATE_REVOKED", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED},
-   #else
-     {"SSLV3_ALERT_CERTIFICATE_REVOKED", 20, 1044},
-   #endif
-+  #ifdef SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED
-+    {"SSLV3_ALERT_CERTIFICATE_REVOKED", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED},
-+  #else
-+    {"SSLV3_ALERT_CERTIFICATE_REVOKED", 20, 1044},
-+  #endif
-+  #ifdef SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN
-+    {"SSLV3_ALERT_CERTIFICATE_UNKNOWN", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN},
-+  #else
-+    {"SSLV3_ALERT_CERTIFICATE_UNKNOWN", 20, 1046},
-+  #endif
-   #ifdef SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN
-     {"SSLV3_ALERT_CERTIFICATE_UNKNOWN", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN},
-   #else
-@@ -7350,6 +7792,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"SSLV3_ALERT_DECOMPRESSION_FAILURE", 20, 1030},
-   #endif
-+  #ifdef SSL_R_SSLV3_ALERT_DECOMPRESSION_FAILURE
-+    {"SSLV3_ALERT_DECOMPRESSION_FAILURE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_DECOMPRESSION_FAILURE},
-+  #else
-+    {"SSLV3_ALERT_DECOMPRESSION_FAILURE", 20, 1030},
-+  #endif
-+  #ifdef SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE
-+    {"SSLV3_ALERT_HANDSHAKE_FAILURE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE},
-+  #else
-+    {"SSLV3_ALERT_HANDSHAKE_FAILURE", 20, 1040},
-+  #endif
-   #ifdef SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE
-     {"SSLV3_ALERT_HANDSHAKE_FAILURE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE},
-   #else
-@@ -7360,11 +7812,26 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"SSLV3_ALERT_ILLEGAL_PARAMETER", 20, 1047},
-   #endif
-+  #ifdef SSL_R_SSLV3_ALERT_ILLEGAL_PARAMETER
-+    {"SSLV3_ALERT_ILLEGAL_PARAMETER", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_ILLEGAL_PARAMETER},
-+  #else
-+    {"SSLV3_ALERT_ILLEGAL_PARAMETER", 20, 1047},
-+  #endif
-   #ifdef SSL_R_SSLV3_ALERT_NO_CERTIFICATE
-     {"SSLV3_ALERT_NO_CERTIFICATE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_NO_CERTIFICATE},
-   #else
-     {"SSLV3_ALERT_NO_CERTIFICATE", 20, 1041},
-   #endif
-+  #ifdef SSL_R_SSLV3_ALERT_NO_CERTIFICATE
-+    {"SSLV3_ALERT_NO_CERTIFICATE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_NO_CERTIFICATE},
-+  #else
-+    {"SSLV3_ALERT_NO_CERTIFICATE", 20, 1041},
-+  #endif
-+  #ifdef SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE
-+    {"SSLV3_ALERT_UNEXPECTED_MESSAGE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE},
-+  #else
-+    {"SSLV3_ALERT_UNEXPECTED_MESSAGE", 20, 1010},
-+  #endif
-   #ifdef SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE
-     {"SSLV3_ALERT_UNEXPECTED_MESSAGE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE},
-   #else
-@@ -7375,6 +7842,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"SSLV3_ALERT_UNSUPPORTED_CERTIFICATE", 20, 1043},
-   #endif
-+  #ifdef SSL_R_SSLV3_ALERT_UNSUPPORTED_CERTIFICATE
-+    {"SSLV3_ALERT_UNSUPPORTED_CERTIFICATE", ERR_LIB_SSL, SSL_R_SSLV3_ALERT_UNSUPPORTED_CERTIFICATE},
-+  #else
-+    {"SSLV3_ALERT_UNSUPPORTED_CERTIFICATE", 20, 1043},
-+  #endif
-   #ifdef SSL_R_SSL_COMMAND_SECTION_EMPTY
-     {"SSL_COMMAND_SECTION_EMPTY", ERR_LIB_SSL, SSL_R_SSL_COMMAND_SECTION_EMPTY},
-   #else
-@@ -7450,6 +7922,36 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"STILL_IN_INIT", 20, 121},
-   #endif
-+  #ifdef SSL_R_STREAM_COUNT_LIMITED
-+    {"STREAM_COUNT_LIMITED", ERR_LIB_SSL, SSL_R_STREAM_COUNT_LIMITED},
-+  #else
-+    {"STREAM_COUNT_LIMITED", 20, 411},
-+  #endif
-+  #ifdef SSL_R_STREAM_FINISHED
-+    {"STREAM_FINISHED", ERR_LIB_SSL, SSL_R_STREAM_FINISHED},
-+  #else
-+    {"STREAM_FINISHED", 20, 365},
-+  #endif
-+  #ifdef SSL_R_STREAM_RECV_ONLY
-+    {"STREAM_RECV_ONLY", ERR_LIB_SSL, SSL_R_STREAM_RECV_ONLY},
-+  #else
-+    {"STREAM_RECV_ONLY", 20, 366},
-+  #endif
-+  #ifdef SSL_R_STREAM_RESET
-+    {"STREAM_RESET", ERR_LIB_SSL, SSL_R_STREAM_RESET},
-+  #else
-+    {"STREAM_RESET", 20, 375},
-+  #endif
-+  #ifdef SSL_R_STREAM_SEND_ONLY
-+    {"STREAM_SEND_ONLY", ERR_LIB_SSL, SSL_R_STREAM_SEND_ONLY},
-+  #else
-+    {"STREAM_SEND_ONLY", 20, 379},
-+  #endif
-+  #ifdef SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED
-+    {"TLSV13_ALERT_CERTIFICATE_REQUIRED", ERR_LIB_SSL, SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED},
-+  #else
-+    {"TLSV13_ALERT_CERTIFICATE_REQUIRED", 20, 1116},
-+  #endif
-   #ifdef SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED
-     {"TLSV13_ALERT_CERTIFICATE_REQUIRED", ERR_LIB_SSL, SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED},
-   #else
-@@ -7460,6 +7962,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV13_ALERT_MISSING_EXTENSION", 20, 1109},
-   #endif
-+  #ifdef SSL_R_TLSV13_ALERT_MISSING_EXTENSION
-+    {"TLSV13_ALERT_MISSING_EXTENSION", ERR_LIB_SSL, SSL_R_TLSV13_ALERT_MISSING_EXTENSION},
-+  #else
-+    {"TLSV13_ALERT_MISSING_EXTENSION", 20, 1109},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_ACCESS_DENIED
-+    {"TLSV1_ALERT_ACCESS_DENIED", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_ACCESS_DENIED},
-+  #else
-+    {"TLSV1_ALERT_ACCESS_DENIED", 20, 1049},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_ACCESS_DENIED
-     {"TLSV1_ALERT_ACCESS_DENIED", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_ACCESS_DENIED},
-   #else
-@@ -7470,6 +7982,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV1_ALERT_DECODE_ERROR", 20, 1050},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_DECODE_ERROR
-+    {"TLSV1_ALERT_DECODE_ERROR", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_DECODE_ERROR},
-+  #else
-+    {"TLSV1_ALERT_DECODE_ERROR", 20, 1050},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_DECRYPTION_FAILED
-+    {"TLSV1_ALERT_DECRYPTION_FAILED", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_DECRYPTION_FAILED},
-+  #else
-+    {"TLSV1_ALERT_DECRYPTION_FAILED", 20, 1021},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_DECRYPTION_FAILED
-     {"TLSV1_ALERT_DECRYPTION_FAILED", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_DECRYPTION_FAILED},
-   #else
-@@ -7480,6 +8002,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV1_ALERT_DECRYPT_ERROR", 20, 1051},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_DECRYPT_ERROR
-+    {"TLSV1_ALERT_DECRYPT_ERROR", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_DECRYPT_ERROR},
-+  #else
-+    {"TLSV1_ALERT_DECRYPT_ERROR", 20, 1051},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION
-+    {"TLSV1_ALERT_EXPORT_RESTRICTION", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION},
-+  #else
-+    {"TLSV1_ALERT_EXPORT_RESTRICTION", 20, 1060},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION
-     {"TLSV1_ALERT_EXPORT_RESTRICTION", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION},
-   #else
-@@ -7490,6 +8022,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV1_ALERT_INAPPROPRIATE_FALLBACK", 20, 1086},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_INAPPROPRIATE_FALLBACK
-+    {"TLSV1_ALERT_INAPPROPRIATE_FALLBACK", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_INAPPROPRIATE_FALLBACK},
-+  #else
-+    {"TLSV1_ALERT_INAPPROPRIATE_FALLBACK", 20, 1086},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY
-+    {"TLSV1_ALERT_INSUFFICIENT_SECURITY", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY},
-+  #else
-+    {"TLSV1_ALERT_INSUFFICIENT_SECURITY", 20, 1071},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY
-     {"TLSV1_ALERT_INSUFFICIENT_SECURITY", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY},
-   #else
-@@ -7500,6 +8042,26 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV1_ALERT_INTERNAL_ERROR", 20, 1080},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_INTERNAL_ERROR
-+    {"TLSV1_ALERT_INTERNAL_ERROR", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_INTERNAL_ERROR},
-+  #else
-+    {"TLSV1_ALERT_INTERNAL_ERROR", 20, 1080},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_NO_APPLICATION_PROTOCOL
-+    {"TLSV1_ALERT_NO_APPLICATION_PROTOCOL", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_NO_APPLICATION_PROTOCOL},
-+  #else
-+    {"TLSV1_ALERT_NO_APPLICATION_PROTOCOL", 20, 1120},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_NO_APPLICATION_PROTOCOL
-+    {"TLSV1_ALERT_NO_APPLICATION_PROTOCOL", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_NO_APPLICATION_PROTOCOL},
-+  #else
-+    {"TLSV1_ALERT_NO_APPLICATION_PROTOCOL", 20, 1120},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_NO_RENEGOTIATION
-+    {"TLSV1_ALERT_NO_RENEGOTIATION", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_NO_RENEGOTIATION},
-+  #else
-+    {"TLSV1_ALERT_NO_RENEGOTIATION", 20, 1100},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_NO_RENEGOTIATION
-     {"TLSV1_ALERT_NO_RENEGOTIATION", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_NO_RENEGOTIATION},
-   #else
-@@ -7510,21 +8072,56 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV1_ALERT_PROTOCOL_VERSION", 20, 1070},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_PROTOCOL_VERSION
-+    {"TLSV1_ALERT_PROTOCOL_VERSION", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_PROTOCOL_VERSION},
-+  #else
-+    {"TLSV1_ALERT_PROTOCOL_VERSION", 20, 1070},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_RECORD_OVERFLOW
-     {"TLSV1_ALERT_RECORD_OVERFLOW", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_RECORD_OVERFLOW},
-   #else
-     {"TLSV1_ALERT_RECORD_OVERFLOW", 20, 1022},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_RECORD_OVERFLOW
-+    {"TLSV1_ALERT_RECORD_OVERFLOW", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_RECORD_OVERFLOW},
-+  #else
-+    {"TLSV1_ALERT_RECORD_OVERFLOW", 20, 1022},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_UNKNOWN_CA
-+    {"TLSV1_ALERT_UNKNOWN_CA", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_UNKNOWN_CA},
-+  #else
-+    {"TLSV1_ALERT_UNKNOWN_CA", 20, 1048},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_UNKNOWN_CA
-     {"TLSV1_ALERT_UNKNOWN_CA", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_UNKNOWN_CA},
-   #else
-     {"TLSV1_ALERT_UNKNOWN_CA", 20, 1048},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_UNKNOWN_PSK_IDENTITY
-+    {"TLSV1_ALERT_UNKNOWN_PSK_IDENTITY", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_UNKNOWN_PSK_IDENTITY},
-+  #else
-+    {"TLSV1_ALERT_UNKNOWN_PSK_IDENTITY", 20, 1115},
-+  #endif
-+  #ifdef SSL_R_TLSV1_ALERT_UNKNOWN_PSK_IDENTITY
-+    {"TLSV1_ALERT_UNKNOWN_PSK_IDENTITY", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_UNKNOWN_PSK_IDENTITY},
-+  #else
-+    {"TLSV1_ALERT_UNKNOWN_PSK_IDENTITY", 20, 1115},
-+  #endif
-   #ifdef SSL_R_TLSV1_ALERT_USER_CANCELLED
-     {"TLSV1_ALERT_USER_CANCELLED", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_USER_CANCELLED},
-   #else
-     {"TLSV1_ALERT_USER_CANCELLED", 20, 1090},
-   #endif
-+  #ifdef SSL_R_TLSV1_ALERT_USER_CANCELLED
-+    {"TLSV1_ALERT_USER_CANCELLED", ERR_LIB_SSL, SSL_R_TLSV1_ALERT_USER_CANCELLED},
-+  #else
-+    {"TLSV1_ALERT_USER_CANCELLED", 20, 1090},
-+  #endif
-+  #ifdef SSL_R_TLSV1_BAD_CERTIFICATE_HASH_VALUE
-+    {"TLSV1_BAD_CERTIFICATE_HASH_VALUE", ERR_LIB_SSL, SSL_R_TLSV1_BAD_CERTIFICATE_HASH_VALUE},
-+  #else
-+    {"TLSV1_BAD_CERTIFICATE_HASH_VALUE", 20, 1114},
-+  #endif
-   #ifdef SSL_R_TLSV1_BAD_CERTIFICATE_HASH_VALUE
-     {"TLSV1_BAD_CERTIFICATE_HASH_VALUE", ERR_LIB_SSL, SSL_R_TLSV1_BAD_CERTIFICATE_HASH_VALUE},
-   #else
-@@ -7535,6 +8132,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE", 20, 1113},
-   #endif
-+  #ifdef SSL_R_TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE
-+    {"TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE", ERR_LIB_SSL, SSL_R_TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE},
-+  #else
-+    {"TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE", 20, 1113},
-+  #endif
-+  #ifdef SSL_R_TLSV1_CERTIFICATE_UNOBTAINABLE
-+    {"TLSV1_CERTIFICATE_UNOBTAINABLE", ERR_LIB_SSL, SSL_R_TLSV1_CERTIFICATE_UNOBTAINABLE},
-+  #else
-+    {"TLSV1_CERTIFICATE_UNOBTAINABLE", 20, 1111},
-+  #endif
-   #ifdef SSL_R_TLSV1_CERTIFICATE_UNOBTAINABLE
-     {"TLSV1_CERTIFICATE_UNOBTAINABLE", ERR_LIB_SSL, SSL_R_TLSV1_CERTIFICATE_UNOBTAINABLE},
-   #else
-@@ -7545,6 +8152,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"TLSV1_UNRECOGNIZED_NAME", 20, 1112},
-   #endif
-+  #ifdef SSL_R_TLSV1_UNRECOGNIZED_NAME
-+    {"TLSV1_UNRECOGNIZED_NAME", ERR_LIB_SSL, SSL_R_TLSV1_UNRECOGNIZED_NAME},
-+  #else
-+    {"TLSV1_UNRECOGNIZED_NAME", 20, 1112},
-+  #endif
-+  #ifdef SSL_R_TLSV1_UNSUPPORTED_EXTENSION
-+    {"TLSV1_UNSUPPORTED_EXTENSION", ERR_LIB_SSL, SSL_R_TLSV1_UNSUPPORTED_EXTENSION},
-+  #else
-+    {"TLSV1_UNSUPPORTED_EXTENSION", 20, 1110},
-+  #endif
-   #ifdef SSL_R_TLSV1_UNSUPPORTED_EXTENSION
-     {"TLSV1_UNSUPPORTED_EXTENSION", ERR_LIB_SSL, SSL_R_TLSV1_UNSUPPORTED_EXTENSION},
-   #else
-@@ -7665,6 +8282,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNKNOWN_KEY_EXCHANGE_TYPE", 20, 250},
-   #endif
-+  #ifdef SSL_R_UNKNOWN_MANDATORY_PARAMETER
-+    {"UNKNOWN_MANDATORY_PARAMETER", ERR_LIB_SSL, SSL_R_UNKNOWN_MANDATORY_PARAMETER},
-+  #else
-+    {"UNKNOWN_MANDATORY_PARAMETER", 20, 323},
-+  #endif
-   #ifdef SSL_R_UNKNOWN_PKEY_TYPE
-     {"UNKNOWN_PKEY_TYPE", ERR_LIB_SSL, SSL_R_UNKNOWN_PKEY_TYPE},
-   #else
-@@ -7700,6 +8322,21 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_COMPRESSION_ALGORITHM", 20, 257},
-   #endif
-+  #ifdef SSL_R_UNSUPPORTED_CONFIG_VALUE
-+    {"UNSUPPORTED_CONFIG_VALUE", ERR_LIB_SSL, SSL_R_UNSUPPORTED_CONFIG_VALUE},
-+  #else
-+    {"UNSUPPORTED_CONFIG_VALUE", 20, 414},
-+  #endif
-+  #ifdef SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS
-+    {"UNSUPPORTED_CONFIG_VALUE_CLASS", ERR_LIB_SSL, SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS},
-+  #else
-+    {"UNSUPPORTED_CONFIG_VALUE_CLASS", 20, 415},
-+  #endif
-+  #ifdef SSL_R_UNSUPPORTED_CONFIG_VALUE_OP
-+    {"UNSUPPORTED_CONFIG_VALUE_OP", ERR_LIB_SSL, SSL_R_UNSUPPORTED_CONFIG_VALUE_OP},
-+  #else
-+    {"UNSUPPORTED_CONFIG_VALUE_OP", 20, 416},
-+  #endif
-   #ifdef SSL_R_UNSUPPORTED_ELLIPTIC_CURVE
-     {"UNSUPPORTED_ELLIPTIC_CURVE", ERR_LIB_SSL, SSL_R_UNSUPPORTED_ELLIPTIC_CURVE},
-   #else
-@@ -7720,6 +8357,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_STATUS_TYPE", 20, 329},
-   #endif
-+  #ifdef SSL_R_UNSUPPORTED_WRITE_FLAG
-+    {"UNSUPPORTED_WRITE_FLAG", ERR_LIB_SSL, SSL_R_UNSUPPORTED_WRITE_FLAG},
-+  #else
-+    {"UNSUPPORTED_WRITE_FLAG", 20, 412},
-+  #endif
-   #ifdef SSL_R_USE_SRTP_NOT_NEGOTIATED
-     {"USE_SRTP_NOT_NEGOTIATED", ERR_LIB_SSL, SSL_R_USE_SRTP_NOT_NEGOTIATED},
-   #else
-@@ -7750,6 +8392,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"WRONG_CURVE", 20, 378},
-   #endif
-+  #ifdef SSL_R_WRONG_RPK_TYPE
-+    {"WRONG_RPK_TYPE", ERR_LIB_SSL, SSL_R_WRONG_RPK_TYPE},
-+  #else
-+    {"WRONG_RPK_TYPE", 20, 351},
-+  #endif
-   #ifdef SSL_R_WRONG_SIGNATURE_LENGTH
-     {"WRONG_SIGNATURE_LENGTH", ERR_LIB_SSL, SSL_R_WRONG_SIGNATURE_LENGTH},
-   #else
-@@ -8055,6 +8702,16 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"BAD_OBJECT", 34, 119},
-   #endif
-+  #ifdef X509V3_R_BAD_OPTION
-+    {"BAD_OPTION", ERR_LIB_X509V3, X509V3_R_BAD_OPTION},
-+  #else
-+    {"BAD_OPTION", 34, 170},
-+  #endif
-+  #ifdef X509V3_R_BAD_VALUE
-+    {"BAD_VALUE", ERR_LIB_X509V3, X509V3_R_BAD_VALUE},
-+  #else
-+    {"BAD_VALUE", 34, 171},
-+  #endif
-   #ifdef X509V3_R_BN_DEC2BN_ERROR
-     {"BN_DEC2BN_ERROR", ERR_LIB_X509V3, X509V3_R_BN_DEC2BN_ERROR},
-   #else
-@@ -8370,6 +9027,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNKNOWN_OPTION", 34, 120},
-   #endif
-+  #ifdef X509V3_R_UNKNOWN_VALUE
-+    {"UNKNOWN_VALUE", ERR_LIB_X509V3, X509V3_R_UNKNOWN_VALUE},
-+  #else
-+    {"UNKNOWN_VALUE", 34, 172},
-+  #endif
-   #ifdef X509V3_R_UNSUPPORTED_OPTION
-     {"UNSUPPORTED_OPTION", ERR_LIB_X509V3, X509V3_R_UNSUPPORTED_OPTION},
-   #else
-@@ -8430,6 +9092,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"CRL_VERIFY_FAILURE", 11, 131},
-   #endif
-+  #ifdef X509_R_DUPLICATE_ATTRIBUTE
-+    {"DUPLICATE_ATTRIBUTE", ERR_LIB_X509, X509_R_DUPLICATE_ATTRIBUTE},
-+  #else
-+    {"DUPLICATE_ATTRIBUTE", 11, 140},
-+  #endif
-   #ifdef X509_R_ERROR_GETTING_MD_BY_NID
-     {"ERROR_GETTING_MD_BY_NID", ERR_LIB_X509, X509_R_ERROR_GETTING_MD_BY_NID},
-   #else
-@@ -8590,6 +9257,11 @@ static struct py_ssl_error_code error_codes[] = {
-   #else
-     {"UNSUPPORTED_ALGORITHM", 11, 111},
-   #endif
-+  #ifdef X509_R_UNSUPPORTED_VERSION
-+    {"UNSUPPORTED_VERSION", ERR_LIB_X509, X509_R_UNSUPPORTED_VERSION},
-+  #else
-+    {"UNSUPPORTED_VERSION", 11, 145},
-+  #endif
-   #ifdef X509_R_WRONG_LOOKUP_TYPE
-     {"WRONG_LOOKUP_TYPE", ERR_LIB_X509, X509_R_WRONG_LOOKUP_TYPE},
-   #else
-diff --git a/Tools/c-analyzer/cpython/_parser.py b/Tools/c-analyzer/cpython/_parser.py
-index 21be53e7884..a08b32fa45d 100644
---- a/Tools/c-analyzer/cpython/_parser.py
-+++ b/Tools/c-analyzer/cpython/_parser.py
-@@ -70,9 +70,7 @@ Python/thread_pthread.h
- Python/thread_pthread_stubs.h
- 
- # only huge constants (safe but parsing is slow)
--Modules/_ssl_data_31.h
--Modules/_ssl_data_300.h
--Modules/_ssl_data_111.h
-+Modules/_ssl_data_*.h
- Modules/cjkcodecs/mappings_*.h
- Modules/unicodedata_db.h
- Modules/unicodename_db.h
-diff --git a/Tools/ssl/make_ssl_data.py b/Tools/ssl/make_ssl_data.py
-index 9860871..0cd05c7 100755
---- a/Tools/ssl/make_ssl_data.py
-+++ b/Tools/ssl/make_ssl_data.py
-@@ -5,9 +5,28 @@ This script should be called *manually* when we want to upgrade SSLError
- `library` and `reason` mnemonics to a more recent OpenSSL version.
- 
- It takes two arguments:
--- the path to the OpenSSL source tree (e.g. git checkout)
-+- the path to the OpenSSL git checkout
- - the path to the header file to be generated Modules/_ssl_data_{version}.h
- - error codes are version specific
-+
-+The OpenSSL git checkout should be at a specific tag, using commands like:
-+    git tag --list 'openssl-*'
-+    git switch --detach openssl-3.4.0
-+
-+
-+After generating the definitions, compare the result with newest pre-existing file.
-+You can use a command like:
-+
-+    git diff --no-index Modules/_ssl_data_31.h Modules/_ssl_data_34.h
-+
-+- If the new version *only* adds new definitions, remove the pre-existing file
-+  and adjust the #include in _ssl.c to point to the new version.
-+- If the new version removes or renumbers some definitions, keep both files and
-+  add a new #include in _ssl.c.
-+
-+A newly supported OpenSSL version should also be added to:
-+- Tools/ssl/multissltests.py
-+- .github/workflows/build.yml
- """
- 
- import argparse
-@@ -16,6 +35,7 @@ import operator
- import os
- import re
- import sys
-+import subprocess
- 
- 
- parser = argparse.ArgumentParser(
-@@ -118,9 +138,17 @@ def main():
-     # sort by libname, numeric error code
-     args.reasons = sorted(reasons, key=operator.itemgetter(0, 3))
- 
-+    git_describe = subprocess.run(
-+        ['git', 'describe', '--long', '--dirty'],
-+        cwd=args.srcdir,
-+        capture_output=True,
-+        encoding='utf-8',
-+        check=True,
-+        )
-     lines = [
--        "/* File generated by Tools/ssl/make_ssl_data.py */"
--        f"/* Generated on {datetime.datetime.utcnow().isoformat()} */"
-+        "/* File generated by Tools/ssl/make_ssl_data.py */",
-+        f"/* Generated on {datetime.datetime.now(datetime.UTC).isoformat()} */",
-+        f"/* Generated from Git commit {git_describe.stdout.strip()} */",
-     ]
-     lines.extend(gen_library_codes(args))
-     lines.append("")
-diff --git a/Tools/ssl/multissltests.py b/Tools/ssl/multissltests.py
-index eae0e0c..fb06f63 100755
---- a/Tools/ssl/multissltests.py
-+++ b/Tools/ssl/multissltests.py
-@@ -51,6 +51,7 @@ OPENSSL_RECENT_VERSIONS = [
-     "3.1.7",
-     "3.2.6",
-     "3.3.5",
-+    "3.4.0",
- ]
- 
- LIBRESSL_OLD_VERSIONS = [
--- 
-2.30.2
-
diff --git a/meta/recipes-devtools/python/python3/0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch b/meta/recipes-devtools/python/python3/0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch
index ffdf9affd9..285580195b 100644
--- a/meta/recipes-devtools/python/python3/0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch
+++ b/meta/recipes-devtools/python/python3/0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch
@@ -1,4 +1,4 @@ 
-From 3f4f3e917950e286d5729ea949ca342995eb3c3e Mon Sep 17 00:00:00 2001
+From e3c6e770e73e1329958db0a73883e42b01763ae3 Mon Sep 17 00:00:00 2001
 From: Alexander Kanavin <alex@linutronix.de>
 Date: Fri, 17 Nov 2023 14:26:32 +0100
 Subject: [PATCH] Lib/sysconfig.py: use prefix value from build configuration
@@ -9,23 +9,36 @@  native python.
 
 Upstream-Status: Inappropriate [oe-core cross builds]
 Signed-off-by: Alexander Kanavin <alex@linutronix.de>
+
+Refresh to apply on top of Python 3.14.0.
+
+Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
 ---
- Lib/sysconfig/__init__.py | 5 +++++
- 1 file changed, 5 insertions(+)
+ Lib/sysconfig/__init__.py | 10 +++++-----
+ 1 file changed, 5 insertions(+), 5 deletions(-)
 
 diff --git a/Lib/sysconfig/__init__.py b/Lib/sysconfig/__init__.py
-index f8e1c7d..0882526 100644
+index 2ecbff222fe..cec54cb23dc 100644
 --- a/Lib/sysconfig/__init__.py
 +++ b/Lib/sysconfig/__init__.py
-@@ -501,6 +501,11 @@ def _init_config_vars():
-         _CONFIG_VARS['VPATH'] = sys._vpath
-     if os.name == 'posix':
-         _init_posix(_CONFIG_VARS)
+@@ -538,12 +538,12 @@ def _init_config_vars():
+     _CONFIG_VARS['py_version'] = _PY_VERSION
+     _CONFIG_VARS['py_version_short'] = _PY_VERSION_SHORT
+     _CONFIG_VARS['py_version_nodot'] = _PY_VERSION_SHORT_NO_DOT
+-    _CONFIG_VARS['installed_base'] = base_prefix
+-    _CONFIG_VARS['base'] = prefix
+-    _CONFIG_VARS['installed_platbase'] = base_exec_prefix
+-    _CONFIG_VARS['platbase'] = exec_prefix
 +    _CONFIG_VARS['installed_base'] = _CONFIG_VARS['prefix']
 +    _CONFIG_VARS['base'] = _CONFIG_VARS['prefix']
 +    _CONFIG_VARS['installed_platbase'] = _CONFIG_VARS['prefix']
 +    _CONFIG_VARS['platbase'] = _CONFIG_VARS['prefix']
 +    _CONFIG_VARS['platlibdir'] = _CONFIG_VARS['PLATLIBDIR']
-     if _HAS_USER_BASE:
-         # Setting 'userbase' is done below the call to the
-         # init function to enable using 'get_config_var' in
+     _CONFIG_VARS['projectbase'] = _PROJECT_BASE
+-    _CONFIG_VARS['platlibdir'] = sys.platlibdir
+     _CONFIG_VARS['implementation'] = _get_implementation()
+     _CONFIG_VARS['implementation_lower'] = _get_implementation().lower()
+     _CONFIG_VARS['abiflags'] = abiflags
+-- 
+2.51.0
+
diff --git a/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch b/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch
index 8fa794b5e7..3528c2765a 100644
--- a/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch
+++ b/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch
@@ -1,4 +1,4 @@ 
-From 8828a52ebace98199569404f01174398bcc64a00 Mon Sep 17 00:00:00 2001
+From 6341e23fedfdde20567c2e695b489119bdddf656 Mon Sep 17 00:00:00 2001
 From: Yi Fan Yu <yifan.yu@windriver.com>
 Date: Thu, 1 Apr 2021 13:08:37 -0700
 Subject: [PATCH] Skip failing tests due to load variability on YP AB
@@ -16,17 +16,21 @@  Skip two additional tests due to suspected load variability failures.
 [YOCTO #15131]
 [YOCTO #15177]
 
+Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
+
+Refresh to apply on top of Python 3.14.0.
+
 Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
 ---
  Lib/test/_test_multiprocessing.py | 3 +++
- Lib/test/test_time.py             | 2 ++
- 2 files changed, 5 insertions(+)
+ Lib/test/test_time.py             | 9 +++++++++
+ 2 files changed, 12 insertions(+)
 
 diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing.py
-index 5dae370..23eb971 100644
+index 9a72362c022..008e6a505a5 100644
 --- a/Lib/test/_test_multiprocessing.py
 +++ b/Lib/test/_test_multiprocessing.py
-@@ -701,6 +701,7 @@ class _TestProcess(BaseTestCase):
+@@ -722,6 +722,7 @@ def test_close(self):
          close_queue(q)
  
      @support.requires_resource('walltime')
@@ -34,7 +38,7 @@  index 5dae370..23eb971 100644
      def test_many_processes(self):
          if self.TYPE == 'threads':
              self.skipTest('test not appropriate for {}'.format(self.TYPE))
-@@ -2232,6 +2233,7 @@ class _TestBarrier(BaseTestCase):
+@@ -2345,6 +2346,7 @@ def _test_timeout_f(cls, barrier, results):
          except threading.BrokenBarrierError:
              results.append(True)
  
@@ -42,7 +46,7 @@  index 5dae370..23eb971 100644
      def test_timeout(self):
          """
          Test wait(timeout)
-@@ -5320,6 +5322,7 @@ class TestWait(unittest.TestCase):
+@@ -5459,6 +5461,7 @@ def signal_and_sleep(cls, sem, period):
          time.sleep(period)
  
      @support.requires_resource('walltime')
@@ -51,18 +55,28 @@  index 5dae370..23eb971 100644
          from multiprocessing.connection import wait
  
 diff --git a/Lib/test/test_time.py b/Lib/test/test_time.py
-index 293799f..1dbb623 100644
+index 5312faa5077..f158e34e91d 100644
 --- a/Lib/test/test_time.py
 +++ b/Lib/test/test_time.py
-@@ -548,6 +548,7 @@ class TimeTestCase(unittest.TestCase):
+@@ -551,9 +551,17 @@ def test_perf_counter(self):
      @unittest.skipIf(
          support.is_wasi, "process_time not available on WASI"
      )
 +    @unittest.skip('timing related test, dependent on load')
+     @unittest.skipIf(
+         support.is_emscripten, "process_time present but doesn't exclude sleep"
+     )
++    @unittest.skipIf(
++        support.is_wasi, "process_time not available on WASI"
++    )
++    @unittest.skip('timing related test, dependent on load')
++    @unittest.skipIf(
++        support.is_wasi, "process_time not available on WASI"
++    )
      def test_process_time(self):
          # process_time() should not include time spend during a sleep
          start = time.process_time()
-@@ -561,6 +562,7 @@ class TimeTestCase(unittest.TestCase):
+@@ -567,6 +575,7 @@ def test_process_time(self):
          self.assertTrue(info.monotonic)
          self.assertFalse(info.adjustable)
  
@@ -70,3 +84,6 @@  index 293799f..1dbb623 100644
      def test_thread_time(self):
          if not hasattr(time, 'thread_time'):
              if sys.platform.startswith(('linux', 'android', 'win')):
+-- 
+2.51.0
+
diff --git a/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch b/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch
index 08ac5861b3..80aa29faf0 100644
--- a/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch
+++ b/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch
@@ -1,4 +1,4 @@ 
-From 540765b148d942a2339affa6c0d11445e9d0f26c Mon Sep 17 00:00:00 2001
+From 9c9aac87f48eaece5b99ea347b639c21eea84e6d Mon Sep 17 00:00:00 2001
 From: Trevor Gamblin <tgamblin@baylibre.com>
 Date: Thu, 13 Jun 2024 10:54:31 -0400
 Subject: [PATCH] test_active_children: skip problematic test
@@ -8,20 +8,27 @@  similar nature to other failing/hanging tests, disable it for now.
 
 Upstream-Status: Inappropriate [OE-Specific]
 
+Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
+
+Refresh to apply on top of Python 3.14.0.
+
 Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
 ---
  Lib/test/_test_multiprocessing.py | 1 +
  1 file changed, 1 insertion(+)
 
 diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing.py
-index 23eb971..b1295b2 100644
+index 008e6a505a5..746de8945f0 100644
 --- a/Lib/test/_test_multiprocessing.py
 +++ b/Lib/test/_test_multiprocessing.py
-@@ -594,6 +594,7 @@ class _TestProcess(BaseTestCase):
-         self.assertTrue(type(cpus) is int)
-         self.assertTrue(cpus >= 1)
+@@ -615,6 +615,7 @@ def test_cpu_count(self):
+         self.assertIsInstance(cpus, int)
+         self.assertGreaterEqual(cpus, 1)
  
 +    @unittest.skip("skipping problematic test")
      def test_active_children(self):
          self.assertEqual(type(self.active_children()), list)
  
+-- 
+2.51.0
+
diff --git a/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch b/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch
new file mode 100644
index 0000000000..d339e8c198
--- /dev/null
+++ b/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch
@@ -0,0 +1,31 @@ 
+From 614e3aefec85b51a611f85a55b6760f12e29b953 Mon Sep 17 00:00:00 2001
+From: Trevor Gamblin <tgamblin@baylibre.com>
+Date: Mon, 27 Oct 2025 09:52:46 -0400
+Subject: [PATCH] test_cmd: skip bang completion test
+
+We compile Python3 with editline support by default, which has tab completion
+but not bang completion. If building with readline,
+test_bang_completion_without_do_shell() passes. Skip the test because of this.
+
+Upstream-Status: Inappropriate [embedded-specific]
+
+Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
+---
+ Lib/test/test_cmd.py | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/Lib/test/test_cmd.py b/Lib/test/test_cmd.py
+index dbfec42fc21..c33dab8d10d 100644
+--- a/Lib/test/test_cmd.py
++++ b/Lib/test/test_cmd.py
+@@ -295,6 +295,7 @@ def do_tab_completion_test(self, args):
+         self.assertIn(b'ab_completion_test', output)
+         self.assertIn(b'tab completion success', output)
+ 
++    @unittest.skip('no bang completion without readline')
+     def test_bang_completion_without_do_shell(self):
+         script = textwrap.dedent("""
+             import cmd
+-- 
+2.51.0
+
diff --git a/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch b/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch
new file mode 100644
index 0000000000..e886c046cb
--- /dev/null
+++ b/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch
@@ -0,0 +1,46 @@ 
+From 66a806ea05ecaf483753de3719041944daae42b0 Mon Sep 17 00:00:00 2001
+From: Trevor Gamblin <tgamblin@baylibre.com>
+Date: Mon, 27 Oct 2025 13:21:14 -0400
+Subject: [PATCH] test_pyrepl: skip test_unix_console.test_cursor_back_write
+
+This test was not run prior to 3.14 due to Python not having access to
+the curses resource. In 3.14, PyREPL's dependency on curses has been
+removed, instead relying on the terminfo module. This results in a
+terminal capability list that does not include ICH1, resulting in an
+"optimization" occurring from PyREPL's side that causes
+test_cursor_back_write() to fail. Specifically, the test tests the
+following writes in sequence:
+
+1. b"1"
+2. TERM_CAPABILITIES["cub"] + b":1"
+3. ANY, b"2"
+
+The first two writes are read correctly, but the result for the third
+write is seeing the equivalent of:
+
+ANY, b"21"
+
+Skip this test.
+
+Upstream-Status: Inappropriate [embedded-specific]
+
+Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
+---
+ Lib/test/test_pyrepl/test_unix_console.py | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/Lib/test/test_pyrepl/test_unix_console.py b/Lib/test/test_pyrepl/test_unix_console.py
+index 3b0d2637dab..5a3c8952f61 100644
+--- a/Lib/test/test_pyrepl/test_unix_console.py
++++ b/Lib/test/test_pyrepl/test_unix_console.py
+@@ -172,6 +172,7 @@ def test_cursor_up_down(self, _os_write):
+         _os_write.assert_any_call(ANY, TERM_CAPABILITIES["cud"] + b":1")
+         con.restore()
+ 
++    @unittest.skip('no ich1 support in vt102 terminfo')
+     def test_cursor_back_write(self, _os_write):
+         events = itertools.chain(
+             code_to_events("1"),
+-- 
+2.51.0
+
diff --git a/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch b/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch
new file mode 100644
index 0000000000..0fe9399bf1
--- /dev/null
+++ b/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch
@@ -0,0 +1,32 @@ 
+From ac5635821ed9bead45a5bcddc3828e50647fbe77 Mon Sep 17 00:00:00 2001
+From: Trevor Gamblin <tgamblin@baylibre.com>
+Date: Mon, 27 Oct 2025 14:24:24 -0400
+Subject: [PATCH] test_sysconfig: skip test_sysconfig.test_sysconfigdata_json
+
+This test seems new as of 3.14.0 and fails due to various path and flag
+differences in variables like CFLAGS. Since the test already has the
+precedent of a skip put in place for Android builds due to prefix
+changes, skip it for our situation too.
+
+Upstream-Status: Inappropriate [embedded-specific]
+
+Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
+---
+ Lib/test/test_sysconfig.py | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/Lib/test/test_sysconfig.py b/Lib/test/test_sysconfig.py
+index 09eff11179e..14fcdedccba 100644
+--- a/Lib/test/test_sysconfig.py
++++ b/Lib/test/test_sysconfig.py
+@@ -685,6 +685,7 @@ def test_makefile_overwrites_config_vars(self):
+         self.assertNotEqual(data['prefix'], data['base_prefix'])
+         self.assertNotEqual(data['exec_prefix'], data['base_exec_prefix'])
+ 
++    @unittest.skip('OE adds/modifies various flags and paths/prefixes')
+     @unittest.skipIf(os.name != 'posix', '_sysconfig-vars JSON file is only available on POSIX')
+     @unittest.skipIf(is_wasi, "_sysconfig-vars JSON file currently isn't available on WASI")
+     @unittest.skipIf(is_android or is_apple_mobile, 'Android and iOS change the prefix')
+-- 
+2.51.0
+
diff --git a/meta/recipes-devtools/python/python3/python3-manifest.json b/meta/recipes-devtools/python/python3/python3-manifest.json
index 441830833b..3184bbe0c3 100644
--- a/meta/recipes-devtools/python/python3/python3-manifest.json
+++ b/meta/recipes-devtools/python/python3/python3-manifest.json
@@ -1040,7 +1040,8 @@ 
             "core"
         ],
         "files": [
-            "${libdir}/python${PYTHON_MAJMIN}/string.py"
+            "${libdir}/python${PYTHON_MAJMIN}/string/__init__.py",
+            "${libdir}/python${PYTHON_MAJMIN}/string/templatelib.py"
         ],
         "cached": [
             "${libdir}/python${PYTHON_MAJMIN}/__pycache__/string.*.pyc"
diff --git a/meta/recipes-devtools/python/python3_3.13.9.bb b/meta/recipes-devtools/python/python3_3.14.0.bb
similarity index 95%
rename from meta/recipes-devtools/python/python3_3.13.9.bb
rename to meta/recipes-devtools/python/python3_3.14.0.bb
index 2e114a6c5b..7b917a02dd 100644
--- a/meta/recipes-devtools/python/python3_3.13.9.bb
+++ b/meta/recipes-devtools/python/python3_3.14.0.bb
@@ -4,7 +4,7 @@  DESCRIPTION = "Python is a programming language that lets you work more quickly
 LICENSE = "PSF-2.0"
 SECTION = "devel/python"
 
-LIC_FILES_CHKSUM = "file://LICENSE;md5=3f64a4ff490f884d562feb77bf2435f1"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=224f30639105a6ab845e068c2d0903ff"
 
 SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \
            file://run-ptest \
@@ -29,20 +29,22 @@  SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \
            file://0001-test_deadlock-skip-problematic-test.patch \
            file://0001-test_active_children-skip-problematic-test.patch \
            file://0001-test_readline-skip-limited-history-test.patch \
-           file://0001-Generate-data-for-OpenSSL-3.4-and-add-it-to-multissl.patch \
+           file://0001-test_cmd-skip-bang-completion-test.patch \
+	   file://0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch \
+	   file://0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch \
            "
 SRC_URI:append:class-native = " \
            file://0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch \
            "
 
-SRC_URI[sha256sum] = "ed5ef34cda36cfa2f3a340f07cac7e7814f91c7f3c411f6d3562323a866c5c66"
+SRC_URI[sha256sum] = "2299dae542d395ce3883aca00d3c910307cd68e0b2f7336098c8e7b7eee9f3e9"
 
 # exclude pre-releases for both python 2.x and 3.x
 UPSTREAM_CHECK_REGEX = "[Pp]ython-(?P<pver>\d+(\.\d+)+).tar"
 
 CVE_PRODUCT = "python:python python_software_foundation:python cpython"
 
-PYTHON_MAJMIN = "3.13"
+PYTHON_MAJMIN = "3.14"
 
 S = "${UNPACKDIR}/Python-${PV}"
 
@@ -70,6 +72,7 @@  DEPENDS = "\
     virtual/libintl \
     xz \
     zlib \
+    zstd \
 "
 
 DEPENDS:append:class-target = " python3-native"
@@ -298,6 +301,15 @@  py_package_preprocess () {
 
         #Remove the unneeded copy of target sysconfig data
         rm -rf ${PKGD}/${libdir}/python-sysconfigdata
+
+	# Remove references to buildpaths in _sysconfig_vars JSON files
+        sed -i -e 's:--sysroot=${STAGING_DIR_TARGET}::g' -e s:'--with-libtool-sysroot=${STAGING_DIR_TARGET}'::g \
+                -e 's|${DEBUG_PREFIX_MAP}||g' \
+                -e 's:${HOSTTOOLS_DIR}/::g' \
+                -e 's:${RECIPE_SYSROOT_NATIVE}::g' \
+                -e 's:${RECIPE_SYSROOT}::g' \
+                -e 's:${BASE_WORKDIR}/${MULTIMACH_TARGET_SYS}::g' \
+		${PKGD}/${libdir}/python${PYTHON_MAJMIN}/_sysconfig_vars*.json
 }
 
 # We want bytecode precompiled .py files (.pyc's) by default