Re: Python 2.7.9 looks for SSL certificates in /etc/ssl instead of /usr/local/etc/ssl

2015-01-01 Thread possnfiffer
I run FreeBSD 10.1-RELEASE x86_64. The last two updates for python2.7_2.2 I
saw were Dec 22nd and Oct 10 (I believe) the Dec update is where I started
having issues with my SABnzbdplus and SickBeard python scripts.

I wrote the following in hopes that readers searching for a fix to https not
loading with your FreeBSD python scripts, like I was, will find the
following useful to get their systems in working order.

Yo,
The latest version of python changed it's defaults and now it looks for CA
certificate in /etc/ssl/cert.pem

I run FreeBSD and the base system doesn't include the file /etc/ssl/cert.pem

If your python scripts have been failing reporting 
urllib2.URLError: urlopen error [SSL: CERTIFICATE_VERIFY_FAILED]
certificate verify failed

then you simply need to apply the following fix as a privileged user
(FreeBSD 10.1-RELEASE last updated today is all I've tested this on)

ln -s /usr/local/etc/ssl/cert.pem /etc/ssl/cert.pem

-Roller aka possnfiffer



--
View this message in context: 
http://freebsd.1045724.n5.nabble.com/Python-2-7-9-looks-for-SSL-certificates-in-etc-ssl-instead-of-usr-local-etc-ssl-tp5976668p5977422.html
Sent from the freebsd-python mailing list archive at Nabble.com.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 192511] [patch] fix lang/python27 build with libressl

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511

--- Comment #20 from Kevin Zheng kevinz5...@gmail.com ---
Using the version in the ports tree, I'm getting this error:
*** WARNING: renaming _ssl since importing it failed:
build/lib.freebsd-10.1-RELEASE-p2-amd64-2.7/_ssl.so: Undefined symbol
SSLv2_method

This probably happened because LibreSSL ripped out SSLv2 support, which causes
the ssl module to not be built, leading to a package failure later on:

Failed to build these modules:
_ssl

pkg-static: Unable to access file
/wrkdirs/usr/ports/lang/python27/work/stage/usr/local/lib/python2.7/lib-dynload/_ssl.so:
No such file or directory
*** Error code 1

I've reported this problem here because all of the above patches seem to deal
only with the RAND_egd() issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 168640] Mk/Uses/python.mk Prevent checksum mismatches for compiled python files on installing python ports via the ports tree

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=168640

Kubilay Kocak ko...@freebsd.org changed:

   What|Removed |Added

  Component|Individual Port(s)  |Ports Framework
   Keywords||needs-qa
Summary|[PATCH]: prevent checksum   |Mk/Uses/python.mk Prevent
   |mismatches for compiled |checksum mismatches for
   |python files on installing  |compiled python files on
   |python ports via the ports  |installing python ports via
   |tree|the ports tree

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 185884] Miscellaneous ports fixes for Python 3

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=185884

Kubilay Kocak ko...@freebsd.org changed:

   What|Removed |Added

 Status|In Progress |Open
Summary|[patch] Miscellaneous ports |Miscellaneous ports fixes
   |fixes for python 3  |for Python 3
   Keywords||easy, needs-qa, patch,
   ||patch-ready

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 195511] lang/python33: Fix build with LibreSSL

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195511

Kubilay Kocak ko...@freebsd.org changed:

   What|Removed |Added

   Priority|--- |Normal
   Keywords||needs-qa, patch
Summary|[PATCH] lang/python33 Fix   |lang/python33: Fix build
   |build with LibreSSL |with LibreSSL

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 195508] lang/python34: Fix build with LibreSSL

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195508

Kubilay Kocak ko...@freebsd.org changed:

   What|Removed |Added

   Priority|--- |Normal
   Keywords||needs-qa, patch
Summary|[PATCH] lang/python34 Fix   |lang/python34: Fix build
   |build with LibreSSL |with LibreSSL

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


Re: Python 2.7.9 looks for SSL certificates in /etc/ssl instead of /usr/local/etc/ssl

2015-01-01 Thread Kubilay Kocak
On 1/01/2015 8:22 PM, possnfiffer wrote:
 I run FreeBSD 10.1-RELEASE x86_64. The last two updates for python2.7_2.2 I
 saw were Dec 22nd and Oct 10 (I believe) the Dec update is where I started
 having issues with my SABnzbdplus and SickBeard python scripts.
 
 I wrote the following in hopes that readers searching for a fix to https not
 loading with your FreeBSD python scripts, like I was, will find the
 following useful to get their systems in working order.
 
 Yo,
 The latest version of python changed it's defaults and now it looks for CA
 certificate in /etc/ssl/cert.pem
 

More precisely, Python uses OpenSSL's SSL_CTX_load_verify_locations
function to find certificates. It does not maintain a list of locations
internally.

For FreeBSD's base OpenSSL, this is /etc/ssl/cert.pem
For FreeBSD's Ports OpenSSL, this is /usr/local/openssl/cert.pem

I have opened a new issue to address Python (and other software) using
OpenSSL from Ports here that has more detail here:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196431

Please add your +1 to it. Seriously.

If you want to see Python (and other software) using OpenSSL from Base
fixed, add your +1 to it, seriously:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=189811

The latter issue proposed to make the ETCSYMLINK option a default, so
people using ports with default options, and those using packages can
FINALLY get SSL certificate verification out of the box.

./koobs



___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 196229] lang/python27: Build (ctypes) fails on i386 with LIBFFI option off

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196229

Kubilay Kocak ko...@freebsd.org changed:

   What|Removed |Added

   Keywords||needs-patch, needs-qa
Summary|lang/python27 build fails   |lang/python27: Build
   |with LIBFFI option off  |(ctypes) fails on i386 with
   ||LIBFFI option off
   Hardware|Any |i386
  Flags|maintainer-feedback?(python |maintainer-feedback+
   |@FreeBSD.org)   |

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 195235] sysutils/py-salt: Requires lsof as a dependency

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195235

Kubilay Kocak ko...@freebsd.org changed:

   What|Removed |Added

  Flags|maintainer-feedback?(christ |maintainer-feedback+
   |er.edwa...@gmail.com)   |
   Keywords|needs-qa|patch-ready

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org


[Bug 192511] lang/python27: Fix build with LibreSSL

2015-01-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511

Kubilay Kocak ko...@freebsd.org changed:

   What|Removed |Added

   Keywords||needs-qa, patch
   Priority|--- |Normal
Summary|[patch]  fix lang/python27  |lang/python27: Fix build
   |build with libressl |with LibreSSL

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-python@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org