Issue #27691: Fix ssl module's parsing of GEN_RID subject alternative name fields...

diff --cc Lib/test/make_ssl_certs.py
Simple merge

diff --cc Lib/test/test_ssl.py
index 4e0e4a2185a7e7bdb15c40d580319fb7ccad53d5,0f4faa09bdeb676502dd03f10c5446b6a0cf9c02..d8d53af62b6e3c9260c349252acec4d8ec7a1354
--- 1/Lib/test/test_ssl.py
--- 2/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@@ -63,10 -56,12 +63,12 @@@ CRLFILE = data_file("revocation.crl"
  # Two keys and certs signed by the same CA (for SNI tests)
  SIGNED_CERTFILE = data_file("keycert3.pem")
  SIGNED_CERTFILE2 = data_file("keycert4.pem")
 -SIGNING_CA = data_file("pycacert.pem")
 +# Same certificate as pycacert.pem, but without extra text in file
 +SIGNING_CA = data_file("capath", "ceff1710.0")
+ # cert with all kinds of subject alt names
+ ALLSANFILE = data_file("allsans.pem")
  
  REMOTE_HOST = "self-signed.pythontest.net"
 -REMOTE_ROOT_CERT = data_file("selfsigned_pythontestdotnet.pem")
  
  EMPTYCERT = data_file("nullcert.pem")
  BADCERT = data_file("badcert.pem")

diff --cc Misc/NEWS
index c3672b2e8ac434c2a7d205870805860bc6231fa7,816e426bcbfd64ccedc165f6e009859459ab7b56..eee58d388e2f1736ac61a958abaf4dfa06f38cb6
--- 1/Misc/NEWS
--- 2/Misc/NEWS
+++ b/Misc/NEWS
@@@ -89,18 -39,30 +89,21 @@@ Core and Builtin
  Library
  -------
  
+ - Issue #27691: Fix ssl module's parsing of GEN_RID subject alternative name
+   fields in X.509 certs.
+ 
 +- Issue #25761: Improved error reporting about truncated pickle data in
 +  C implementation of unpickler.  UnpicklingError is now raised instead of
 +  AttributeError and ValueError in some cases.
 +
 +- Issue #26798: Add BLAKE2 (blake2b and blake2s) to hashlib.
 +
 +- Issue #25596: Optimized glob() and iglob() functions in the
 +  glob module; they are now about 3--6 times faster.
 +
 +- Issue #27928: Add scrypt (password-based key derivation function) to
 +  hashlib module (requires OpenSSL 1.1.0).
 +
  - Issue #27850: Remove 3DES from ssl module's default cipher list to counter
    measure sweet32 attack (CVE-2016-2183).
  

diff --cc Modules/_ssl.c
Simple merge