[issue24545] Issue with ssl package

[Christian Heimes]

Christian Heimes added the comment:

It will be fix in 2.7.13 as part of my OpenSSL 1.1.0 patch.

--
resolution:  -> fixed
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue24545] Issue with ssl package

[Antoine Pitrou]

Antoine Pitrou added the comment:

We should probably change the default value for the *ssl_version* parameter.
In the meantime, you can workaround this simply with:

cert = ssl.get_server_certificate((, 443), ssl.PROTOCOL_SSLv23)

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue24545] Issue with ssl package

[Stefan Krah]

Changes by Stefan Krah :


--
type: crash -> behavior

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue24545] Issue with ssl package

[Christian Heimes]

Changes by Christian Heimes :


--
nosy: +alex, christian.heimes, dstufft, giampaolo.rodola, janssen, pitrou

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue24545] Issue with ssl package

[Kayne]

New submission from Kayne:

I tried to use cert = ssl.get_server_certificate((, 443)) and it crashed 
with following error:

Traceback (most recent call last):
  File "PeerCertChainQuery.py", line 107, in 
cert = ssl.get_server_certificate((options.host, 443))
  File "/opt/lib/python2.7/ssl.py", line 965, in get_server_certificate
with closing(context.wrap_socket(sock)) as sslsock:
  File "/opt/lib/python2.7/ssl.py", line 350, in wrap_socket
_context=self)
  File "/opt/lib/python2.7/ssl.py", line 566, in __init__
self.do_handshake()
  File "/opt/lib/python2.7/ssl.py", line 788, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake 
failure (_ssl.c:581)

Note that the configuration of apache server on the host  has disabled ssl3 
support and it only supports TLSV1, TLVS1.1, AND TLSV1.3.

This also happened on Python 3.4.3. 

Much appreciated if you could have a look at what happened or suggest me 
how to get around this.

--
components: Library (Lib)
messages: 246037
nosy: kxl561
priority: normal
severity: normal
status: open
title: Issue with ssl package
type: crash
versions: Python 2.7

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com