We are running some cloudformation custom resources on lambda 3.8 runtime that uses cfnresponse package.
Cfnresponse depends on the package urllib3 which recently released a new major version 2.
When importing urllib3 of version 2.0.0 in our lambdas we get the following error:
[ERROR] Runtime.ImportModuleError: Unable to import module '<lambda name>': urllib3 v2.0 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with OpenSSL 1.0.2k-fips 26 Jan 2017. See: https://github.com/urllib3/urllib3/issues/2168
Traceback (most recent call last):
Can we expect python 3.8 runtime to get upgraded to OpenSSL 1.1.1+ any time soon?
Otherwise cfnresponse should probably get a explicit dependency on urllib3 1.x.x, since it's main purpose is to be run in lambdas and urllib3 2.x.x cannot be run there as it is now.
AWS OFFICIALAktualisiert vor einem Jahr
FOLLOWING THIS. Experiencing the same issue.
getting the same issue, i tried to update openssl version also checked that indeed the openssl version was 1.1.1f (using openssl version) , used pip install urllib3==1.26.15 and pip install requests==2.28.1( as my lambda was using "request" module) did the changes in buildspec
https://kb.vmware.com/s/article/92237?lang=en_US
still the lambda giving the same error,why it is not picking the changes