This package will install Python 3.5.1 for Mac OS X 10.

6 or later for the following

architecture(s): i386, x86_64.
Which installer variant should I use?
Python.org provides two installer variants for download: one that installs a 64-bit/32-bit
Intel Python capable of running on Mac OS X 10.6 (Snow Leopard) or later; and one
that installs a 32-bit-only (Intel and PPC) Python capable of running on Mac OS X 10.5
(Leopard) or later. This ReadMe was installed with the 10.6 or later variant. Unless you
are installing to an 10.5 system or you need to build applications that can run on 10.5
systems, use the 10.6 variant if possible. There are some additional operating system
functions that are supported starting with 10.6 and you may see better performance
using 64-bit mode. By default, Python will automatically run in 64-bit mode if your
system supports it. Also see Certificate verification and OpenSSL below. The Pythons
installed by these installers are built with private copies of some third-party libraries not
included with or newer than those in OS X itself. The list of these libraries varies by
installer variant and is included at the end of the License.rtf file.
Update your version of Tcl/Tk to use IDLE or other Tk applications
To use IDLE or other programs that use the Tkinter graphical user interface toolkit, you
need to install a newer third-party version of the Tcl/Tk frameworks. Visit
https://www.python.org/download/mac/tcltk/ for current information about supported and
recommended versions of Tcl/Tk for this version of Python and of Mac OS X.
Certificate verification and OpenSSL
Python 3.5 includes a number of network security enhancements that were released in
Python 3.4.3 and Python 2.7.10. PEP 476 changes several standard library modules,
like httplib, urllib, and xmlrpclib, to by default verify certificates presented by servers
over secure (TLS) connections. The verification is performed by the OpenSSL libraries
that Python is linked to. Prior to 3.4.3, both python.org installers dynamically linked with
Apple-supplied OpenSSL libraries shipped with OS X. OS X provides a multiple level
security framework that stores trust certificates in system and user keychains managed
by the Keychain Access application and the security command line utility.
For OS X 10.5, Apple provides OpenSSL 0.9.7 libraries. This version of Apple's

OpenSSL does not use the certificates from the system security framework, even when
used on newer versions of OS X. Instead it consults a traditional OpenSSL
concatenated certificate file (cafile) or certificate directory (capath), located in
/System/Library/OpenSSL. These directories are typically empty and not managed
by OS X; you must manage them yourself or supply your own SSL contexts. OpenSSL
0.9.7 is obsolete by current security standards, lacking a number of important features
found in later versions. Among the problems this causes is the inability to verify highersecurity certificates now used by python.org services, including the Python Package
Index, PyPI. To solve this problem, the 10.5+ 32-bit-only python.org variant is linked
with a private copy of OpenSSL 1.0.2; it consults the same default certificate directory,
/System/Library/OpenSSL. As before, it is still necessary to manage certificates
yourself when you use this Python variant and, with certificate verification now enabled
by default, you may now need to take additional steps to ensure your Python programs
have access to CA certificates you trust. If you use this Python variant to build
standalone applications with third-party tools like py2app, you may now need to bundle
CA certificates in them or otherwise supply non-default SSL contexts.
For OS X 10.6+, Apple also provides OpenSSL 0.9.8 libraries. Apple's 0.9.8 version
includes an important additional feature: if a certificate cannot be verified using the
manually administered certificates in /System/Library/OpenSSL, the certificates
managed by the system security framework In the user and system keychains are also
consulted (using Apple private APIs). For this reason, the 64-bit/32-bit 10.6+ python.org
variant continues to be dynamically linked with Apple's OpenSSL 0.9.8 since it was felt
that the loss of the system-provided certificates and management tools outweighs the
additional security features provided by newer versions of OpenSSL. This will likely
change in future releases of the python.org installers as Apple has deprecated use of
the system-supplied OpenSSL libraries. If you do need features from newer versions of
OpenSSL, there are third-party OpenSSL wrapper packages available through PyPI.
The bundled pip included with the Python 3.5 installers has its own default certificate
store for verifying download connections.
Other changes
For other changes in this release, see the What's new section in the Documentation Set
for this release and its Release Notes link at https://www.python.org/downloads/.

Python 3 and Python 2 Co-existence

Python.org Python 3.5 and 2.7.x versions can both be installed on your system and will
not conflict. Command names for Python 3 contain a 3 in them, python3 (or
python3.5), idle3 (or idle3.5), pip3 (or pip3.5), etc. Python 2.7 command names
contain a 2 or no digit: python2 (or python2.7 or python), idle2 (or idle2.7 or idle),
etc.