docker: Resync with manylinux

docker/linux/build_scripts/build.sh

@@ -54,6 +54,9 @@ mv devtools-2.repo /etc/yum.repos.d/devtools-2.repo
 rpm -Uvh --replacepkgs epel-release-5*.rpm
 rm -f epel-release-5*.rpm
 
+# from now on, we shall only use curl to retrieve files
+yum -y erase wget
+
 # Development tools and libraries
 yum -y install \
     automake \
@@ -170,10 +173,9 @@ find /opt/_internal -type f -print0 \
 # We do not need the Python test suites, or indeed the precompiled .pyc and
 # .pyo files. Partially cribbed from:
 #    https://github.com/docker-library/python/blob/master/3.4/slim/Dockerfile
-find /opt/_internal \
+find /opt/_internal -depth \
      \( -type d -a -name test -o -name tests \) \
-  -o \( -type f -a -name '*.pyc' -o -name '*.pyo' \) \
-  -print0 | xargs -0 rm -f
+  -o \( -type f -a -name '*.pyc' -o -name '*.pyo' \) | xargs rm -rf
 
 for PYTHON in /opt/python/*/bin/python; do
     # Smoke test to make sure that our Pythons work, and do indeed detect as

docker/linux/build_scripts/build_env.sh

@@ -1,12 +1,12 @@
 # source me
 
 PYTHON_DOWNLOAD_URL=https://www.python.org/ftp/python
-CPYTHON_VERSIONS="3.5.5 3.6.5 3.7.0"
+CPYTHON_VERSIONS="3.5.6 3.6.7 3.7.1"
 
 # openssl version to build, with expected sha256 hash of .tar.gz
 # archive.
-OPENSSL_ROOT=openssl-1.0.2o
-OPENSSL_HASH=ec3f5c9714ba0fd45cb4e087301eb1336c317e0d20b575a125050470e8089e4d
+OPENSSL_ROOT=openssl-1.0.2p
+OPENSSL_HASH=50a98e07b1a89eb8f6a99477f262df71c6fa7bef77df4dc83025a2845c827d00
 OPENSSL_DOWNLOAD_URL=https://www.openssl.org/source
 
 # Update to slightly newer, verified Git commit:

docker/linux/build_scripts/build_utils.sh

@@ -90,10 +90,7 @@ function build_cpython {
 
 function build_cpythons {
     check_var $GET_PIP_URL
-    # CentOS 5 curl uses such an old OpenSSL that it doesn't support the TLS
-    # versions used by the get-pip server. Keep trying though, because we'll
-    # want to go back using $GET_PIP_URL when we upgrade to a newer CentOS...
-    curl -sSLO $GET_PIP_URL || cp ${MY_DIR}/get-pip.py .
+    curl -fsSLO $GET_PIP_URL
     # Import public keys used to verify downloaded Python source tarballs.
     # https://www.python.org/static/files/pubkeys.txt
     gpg --import ${MY_DIR}/cpython-pubkeys.txt