Fix manual prompt in pyopenssl adapter for private key password

- If pyopenssl adapter was used with password protected private key,
  the manual entry option was not given, only a fail due to
  invalid password. The password callback was triggered also
  in the case where the private_key_password was None.

Author: jatalahd

cheroot/ssl/pyopenssl.py

@@ -367,7 +367,8 @@ def get_context(self):
         """
         # See https://code.activestate.com/recipes/442473/
         c = SSL.Context(SSL.SSLv23_METHOD)
-        c.set_passwd_cb(self._password_callback, self.private_key_password)
+        if self.private_key_password is not None:
+            c.set_passwd_cb(self._password_callback, self.private_key_password)
         c.use_privatekey_file(self.private_key)
         if self.certificate_chain:
             c.load_verify_locations(self.certificate_chain)

docs/changelog-fragments.d/798.bugfix.rst

@@ -0,0 +1,2 @@
+Fixed pyopenssl adapter password prompt when encrypted private key used and password not given via private_key_password argument
+-- by :user:`jatalahd`.