[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
This bug was fixed in the package python-jujuclient - 0.50.5-0ubuntu2~16.10 --- python-jujuclient (0.50.5-0ubuntu2~16.10) yakkety-proposed; urgency=medium * Add patch to use TLSv1.2 since Juju dropped TLSv1 (LP: #1644153) -- Christopher Glass (Ubuntu) Mon, 28 Nov 2016 10:56:30 + ** Changed in: python-jujuclient (Ubuntu Yakkety) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
This bug was fixed in the package python-jujuclient - 0.50.5-0ubuntu2~16.04 --- python-jujuclient (0.50.5-0ubuntu2~16.04) xenial-proposed; urgency=medium * Add patch to use TLSv1.2 since Juju dropped TLSv1 (LP: #1644153) -- Christopher Glass (Ubuntu) Mon, 28 Nov 2016 10:56:30 + ** Changed in: python-jujuclient (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
** Tags removed: verification-needed-xenial verification-needed-yakkety ** Tags added: verification-done-xenial verification-done-yakkety -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
@brian-murray.. Oh I though that was recommended.. Adding a comment makes it not green in the SRU tracker. For both releases I confirmed that juju-deployer was not working (with SSL/TLS error). Then I installed the --proposed package and re ran juju-deployer (specifically to deploy mysql IIRC) and it worked fine. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Bryan - can you add some information about the test you ran and the package versions you used? The SRU team frowns upon just tagging the bug verification-done. ** Tags removed: verification-done-xenial verification-done-yakkety ** Tags added: verification-needed-xenial verification-needed-yakkety -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
** Tags removed: verification-needed-yakkety ** Tags added: verification-done-yakkety -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
** Tags removed: verification-needed ** Tags added: verification-done-xenial verification-needed-yakkety -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Hello Chris, or anyone else affected, Accepted python-jujuclient into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/python- jujuclient/0.50.5-0ubuntu2~16.04 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
This bug was fixed in the package python-jujuclient - 0.50.5-0ubuntu2 --- python-jujuclient (0.50.5-0ubuntu2) zesty; urgency=medium * Add patch to use TLSv1.2 since Juju dropped TLSv1 (LP: #1644153) -- Christopher Glass (Ubuntu) Wed, 23 Nov 2016 12:43:10 + ** Changed in: python-jujuclient (Ubuntu Zesty) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
** Changed in: python-jujuclient (Ubuntu Xenial) Importance: Undecided => High ** Changed in: python-jujuclient (Ubuntu Zesty) Importance: Undecided => High ** Changed in: python-jujuclient (Ubuntu Yakkety) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
All patches uploaded. ** Changed in: python-jujuclient (Ubuntu Xenial) Status: New => Fix Committed ** Changed in: python-jujuclient (Ubuntu Yakkety) Status: New => Fix Committed ** Changed in: python-jujuclient (Ubuntu Zesty) Status: Confirmed => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Xenial debdiff ** Patch added: "Xenial debdiff" https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+attachment/4784081/+files/xenial.deb.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Yakkety debdiff ** Patch added: "Yakkety debdiff" https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+attachment/4784079/+files/yakkety.deb.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
I re-ran the outlined test-sequence without adding the juju-stable PPA (like I originally did) to make sure this bug is not a side-effect of the PPA. It is not. It is reproducible on vanilla distro as outlined in the description. ** Description changed: [Impact] * The python Juju client cannot make SSL connections to the server anymore, because TLS v1.0 was deprecated on the server. * Switching to TLS v1.2 fixes the problem entirely. * Example failure: http://pastebin.ubuntu.com/23521446/ [Test case] Steps to reproduce (works in a container, needs a valid juju environment): - * Install juju 1.25, ideally from the juju stable ppa: sudo add-apt-repository ppa:juju/stable; sudo apt-get update; sudo apt-get install juju-1-default + * Install juju 1.25: sudo apt-get install juju-1-default juju-1.25 * Install the package: sudo apt-get install python-jujuclient * Set up an environment (ec2 works for instance) * Bootstrap environment: "juju bootstrap # Note your environment's name" * Run: python -c 'from jujuclient import Environment; Environment.connect("")' [Regression Potential] * None - the package is completely unusable in its current state because of server changes. It can't get any worse :) [Other Info] * The attached patch is the minimal fix - forcing Python to connect over TLS 1.2 instead of forcing TLS 1.0. * TLS 1.2 connectivity is available in all targeted releases. * lp:python-jujuclient (upstream) is not affected by the problem, but the code is much diverged from the version in the archives, with way too many changes for a SRU. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
** Description changed: - Package affected: python-jujuclient 0.50.5-0ubuntu1 (on Xenial) + [Impact] - The python Juju client cannot make SSL connections to the server - anymore, because TLS v1 was deprecated. + * The python Juju client cannot make SSL connections to the server anymore, because TLS v1.0 was deprecated on the server. + * Switching to TLS v1.2 fixes the problem entirely. + * Example failure: http://pastebin.ubuntu.com/23521446/ - Switching to TLS v1.2 fixes the problem entirely. + [Test case] - Example failure: http://pastebin.ubuntu.com/23521446/ + Steps to reproduce (works in a container, needs a valid juju + environment): - lp:python-jujuclient is not affected by the problem, but the code is much diverged from the version in the archives, way too many changes for a SRU. - The attached patch is the minimal fix - forcing Python to connect over TLS 1.2 instead of forcing TLS 1.0. + * Install juju 1.25, ideally from the juju stable ppa: sudo add-apt-repository ppa:juju/stable; sudo apt-get update; sudo apt-get install juju-1-default + * Install the package: sudo apt-get install python-jujuclient + * Set up an environment (ec2 works for instance) + * Bootstrap environment: "juju bootstrap # Note your environment's name" + * Run: python -c 'from jujuclient import Environment; Environment.connect("")' - TLS 1.2 connectivity is available in all affected releases. + [Regression Potential] - Steps to reproduce (works in a container): + * None - the package is completely unusable in its current state + because of server changes. It can't get any worse :) - - Install juju 1.25, ideally from the juju stable ppa: sudo add-apt-repository ppa:juju/stable; sudo apt-get update; sudo apt-get install juju-1-default - - Install the package: sudo apt-get install python-jujuclient - - Set up an environment (ec2 works for instance) - - Bootstrap environment: "juju bootstrap # Note your environment's name" - - Run: python -c 'from jujuclient import Environment; Environment.connect("")' + [Other Info] + + * The attached patch is the minimal fix - forcing Python to connect over TLS 1.2 instead of forcing TLS 1.0. + * TLS 1.2 connectivity is available in all targeted releases. + * lp:python-jujuclient (upstream) is not affected by the problem, but the code is much diverged from the version in the archives, with way too many changes for a SRU. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Let's re-use this bug report for xenial and yakkety too. ** Also affects: python-jujuclient (Ubuntu Zesty) Importance: Undecided Status: Confirmed ** Also affects: python-jujuclient (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: python-jujuclient (Ubuntu Yakkety) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
** Description changed: Package affected: python-jujuclient 0.50.5-0ubuntu1 (on Xenial) The python Juju client cannot make SSL connections to the server anymore, because TLS v1 was deprecated. Switching to TLS v1.2 fixes the problem entirely. Example failure: http://pastebin.ubuntu.com/23521446/ - It seems like lp:python-jujuclient already has the fix. + lp:python-jujuclient is not affected by the problem, but the code is + much diverged from the version in the archives, way too many changes for + a SRU. + + Steps to reproduce (works in a container): + + - Install juju 1.25, ideally from the juju stable ppa: sudo add-apt-repository ppa:juju/stable; sudo apt-get update; sudo apt-get install juju-1-default + - Install the package: sudo apt-get install python-jujuclient + - Set up an environment (ec2 works for instance) + - Bootstrap environment: "juju bootstrap " + - Run: python -c 'from jujuclient import Environment; Environment.connect("")' ** Description changed: Package affected: python-jujuclient 0.50.5-0ubuntu1 (on Xenial) The python Juju client cannot make SSL connections to the server anymore, because TLS v1 was deprecated. Switching to TLS v1.2 fixes the problem entirely. Example failure: http://pastebin.ubuntu.com/23521446/ lp:python-jujuclient is not affected by the problem, but the code is much diverged from the version in the archives, way too many changes for a SRU. Steps to reproduce (works in a container): - Install juju 1.25, ideally from the juju stable ppa: sudo add-apt-repository ppa:juju/stable; sudo apt-get update; sudo apt-get install juju-1-default - Install the package: sudo apt-get install python-jujuclient - Set up an environment (ec2 works for instance) - - Bootstrap environment: "juju bootstrap " + - Bootstrap environment: "juju bootstrap # Note your environment's name" - Run: python -c 'from jujuclient import Environment; Environment.connect("")' ** Description changed: Package affected: python-jujuclient 0.50.5-0ubuntu1 (on Xenial) The python Juju client cannot make SSL connections to the server anymore, because TLS v1 was deprecated. Switching to TLS v1.2 fixes the problem entirely. Example failure: http://pastebin.ubuntu.com/23521446/ - lp:python-jujuclient is not affected by the problem, but the code is - much diverged from the version in the archives, way too many changes for - a SRU. + lp:python-jujuclient is not affected by the problem, but the code is much diverged from the version in the archives, way too many changes for a SRU. + The attached patch is the minimal fix - forcing Python to connect over TLS 1.2 instead of forcing TLS 1.0. + + TLS 1.2 connectivity is available in all affected releases. Steps to reproduce (works in a container): - Install juju 1.25, ideally from the juju stable ppa: sudo add-apt-repository ppa:juju/stable; sudo apt-get update; sudo apt-get install juju-1-default - Install the package: sudo apt-get install python-jujuclient - Set up an environment (ec2 works for instance) - Bootstrap environment: "juju bootstrap # Note your environment's name" - Run: python -c 'from jujuclient import Environment; Environment.connect("")' -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: python-jujuclient (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Once this gets into zesty I shall open another bug for the SRU into yakkety and xenial. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
** Summary changed: - SSL handshake fails on xenial + SSL handshake fails on xenial, yakkety, zesty -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644153 Title: SSL handshake fails on xenial, yakkety, zesty To manage notifications about this bug go to: https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs