Define TLS cipher suite on build time

python3.spec

@@ -14,7 +14,7 @@ URL: https://www.python.org/
 #  WARNING  When rebasing to a new Python version,
 #           remember to update the python3-docs package as well
 Version: %{pybasever}.4
-Release: 10%{?dist}
+Release: 11%{?dist}
 License: Python
 
 
@@ -378,6 +378,14 @@ Patch291: 00291-setup-Link-ctypes-against-dl-explicitly.patch
 # Reported upstream: https://bugs.python.org/issue30697
 Patch292: 00292-restore-PyExc_RecursionErrorInst-symbol.patch
 
+# 00294 #
+# Define TLS cipher suite on build time depending
+# on the OpenSSL default cipher suite selection.
+# Fixed upstream on CPython's 3.7 branch:
+# https://bugs.python.org/issue31429
+# See also: https://bugzilla.redhat.com/show_bug.cgi?id=1489816
+Patch294: 00294-define-TLS-cipher-suite-on-build-time.patch
+
 # (New patches go here ^^^)
 #
 # When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@@ -647,6 +655,7 @@ sed -r -i s/'_PIP_VERSION = "[0-9.]+"'/'_PIP_VERSION = "%{pip_version}"'/ Lib/en
 %patch290 -p1
 %patch291 -p1
 %patch292 -p1
+%patch294 -p1
 
 
 # Remove files that should be generated by the build
@@ -718,6 +727,7 @@ BuildPython() {
   --enable-loadable-sqlite-extensions \
   --with-dtrace \
   --with-lto \
+  --with-ssl-default-suites=openssl \
 %if %{with valgrind}
   --with-valgrind \
 %endif
@@ -1512,6 +1522,9 @@ fi
 # ======================================================
 
 %changelog
+* Thu Feb 01 2018 Charalampos Stratakis <cstratak@redhat.com> - 3.6.4-11
+- Define TLS cipher suite on build time.
+
 * Wed Jan 31 2018 Tomas Orsava <torsava@redhat.com> - 3.6.4-10
 - Disable test_gdb for all arches and test_buffer for ppc64le in anticipation
   of the F28 mass rebuild