因openssl 1.0.1存在安全问题，python3自3.7版本后要求依赖openssl 1.0.2以上或libressl；错误提示如下：

Python requires an OpenSSL 1.0.2 or 1.1 compatible libssl with X509_VERIFY_P

---

python3.7以上建议使用libressl代替openssl，故需通过源码编译安装libressl

# 下载源码包

wget https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.0.2.tar.gz

# 解压

tar -zxvf libressl-3.0.2.tar.gz

# 配置安装路径

mkdir /usr/local/libressl

cd libressl-3.0.2

./configure --prefix=/usr/local/libressl

# 安装

make & make install

# 创建软连接代替openssl

mv /usr/bin/openssl /usr/bin/openssl.bak

mv /usr/include/openssl /usr/include/openssl.bak

ln -s /usr/local/libressl/bin/openssl /usr/bin/openssl

ln -s /usr/local/libressl/include/openssl /usr/include/openssl

echo /usr/local/libressl/lib >> /etc/ld.so.conf.d/libressl-3.0.2.conf

ldconfig -v

验证是否安装完成

openssl version

export LDFLAGS="-L/usr/local/libressl/lib"

export CPPFLAGS="-I/usr/local/libressl/include"

export PKG_CONFIG_PATH="/usr/local/libressl/lib/pkgconfig"

配置编译安装python

./configure --prefix=/usr/local/python37 

make

make install

验证ssl 安装正确

import ssl没有报错