因openssl 1.0.1存在安全问题，python3自3.7版本后要求依赖openssl 1.0.2以上或libressl；错误提示如下：
Python requires an OpenSSL 1.0.2 or 1.1 compatible libssl with X509_VERIFY_P
python3.7以上建议使用libressl代替openssl，故需通过源码编译安装libressl
# 下载源码包
wget https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.0.2.tar.gz
# 解压
tar -zxvf libressl-3.0.2.tar.gz
# 配置安装路径
mkdir /usr/local/libressl
cd libressl-3.0.2
./configure --prefix=/usr/local/libressl
# 安装
make & make install
# 创建软连接代替openssl
mv /usr/bin/openssl /usr/bin/openssl.bak
mv /usr/include/openssl /usr/include/openssl.bak
ln -s /usr/local/libressl/bin/openssl /usr/bin/openssl
ln -s /usr/local/libressl/include/openssl /usr/include/openssl
echo /usr/local/libressl/lib >> /etc/ld.so.conf.d/libressl-3.0.2.conf
ldconfig -v
验证是否安装完成
openssl version
export LDFLAGS="-L/usr/local/libressl/lib"
export CPPFLAGS="-I/usr/local/libressl/include"
export PKG_CONFIG_PATH="/usr/local/libressl/lib/pkgconfig"
配置编译安装python
./configure --prefix=/usr/local/python37
make
make install
验证ssl 安装正确
import ssl没有报错