Since Python 3.10, the security of the default SSL cipher settings have been
increased: https://bugs.python.org/issue43998

This causes issues, for example, with Certipy and Impacket, two very popular
Python packages among Kali Linux users. See for instance:
https://github.com/ly4k/Certipy/pull/110

The problem is exacerbated by the fact that changes to the Python library
ldap3 are needed to take full effect of the patch linked above, and ldap3
appears to be effectively unmaintained. See: https://github.com/cannatag/ldap3/pull/1067

Python does not respect the cipher settings defined in /etc/ssl/openssl.cnf
by default. Arguably, Kali Linux users have different needs than regular
users and should be empowered to configure as many parts of their system as
possible to suit their needs. That's why I propose to change Python's
behavior by setting a configure option at build time.

If we set the following configure option to openssl, users should be able
to allow weak cipher settings in all connections initiated by Python
programs: https://docs.python.org/3.10/using/configure.html#cmdoption-with-ssl-default-suites

At the same time, regular users who don't mess with config files should not
be affected and their cipher settings will not be weakened unexpectedly.

Please let me know whether you think that this is a sensible approach and
whether you are open to changing Python's configure options in order to
distribute custom builds.