Bug report

Bug description:

Filing this to attach a PR to.

cert_store_stats and get_ca_certs query the SSLContext's X509_STORE with X509_STORE_get0_objects, but reading the result requires a lock. See openssl/openssl#23224 for details.

CPython versions tested on:

CPython main branch

Operating systems tested on:

Linux, macOS

Linked PRs

• gh-114572: Fix locking in cert_store_stats and get_ca_certs #114573
• [3.12] gh-114572: Fix locking in cert_store_stats and get_ca_certs (GH-114573) #115547
• [3.10] gh-114572: Fix locking in cert_store_stats and get_ca_certs (GH-114573) #115548
• [3.11] gh-114572: Fix locking in cert_store_stats and get_ca_certs (GH-114573) #115549
• [3.9] gh-114572: Fix locking in cert_store_stats and get_ca_certs #118109
• [3.8] gh-114572: Fix locking in cert_store_stats and get_ca_certs #118442