Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OCI Support Broken (SSL Failure) #11

Closed
0xdade opened this issue Jun 6, 2020 · 0 comments
Closed

OCI Support Broken (SSL Failure) #11

0xdade opened this issue Jun 6, 2020 · 0 comments
Labels
bug Something isn't working Provider Support Requesting support for a particular provider

Comments

@0xdade
Copy link
Owner

0xdade commented Jun 6, 2020

There seems to be an upstream problem with OCI's SSL certificate bundle that causes curl and python requests to not trust it. Chrome seems to not care, though. Filing here as a known issue until it gets resolved.

python sephiroth.py -s apache -c oci -r 0xda.de
Traceback (most recent call last):
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/urllib3/connectionpool.py", line 672, in urlopen
    chunked=chunked,
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/urllib3/connectionpool.py", line 376, in _make_request
    self._validate_conn(conn)
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/urllib3/connectionpool.py", line 994, in _validate_conn
    conn.connect()
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/urllib3/connection.py", line 360, in connect
    ssl_context=context,
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/urllib3/util/ssl_.py", line 370, in ssl_wrap_socket
    return context.wrap_socket(sock, server_hostname=server_hostname)
  File "/usr/lib/python3.6/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
  File "/usr/lib/python3.6/ssl.py", line 817, in __init__
    self.do_handshake()
  File "/usr/lib/python3.6/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/lib/python3.6/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/requests/adapters.py", line 449, in send
    timeout=timeout
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/urllib3/connectionpool.py", line 720, in urlopen
    method, url, error=e, _pool=self, _stacktrace=sys.exc_info()[2]
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/urllib3/util/retry.py", line 436, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='docs.cloud.oracle.com', port=443): Max retries exceeded with url: /en-us/iaas/tools/public_ip_ranges.json (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "sephiroth.py", line 177, in <module>
    main()
  File "sephiroth.py", line 163, in main
    provider_vars = get_ranges(provider, args.excludeip6)
  File "sephiroth.py", line 46, in get_ranges
    provider = Provider(selected_provider)
  File "/mnt/c/Users/dade/Desktop/sephiroth/providers/provider.py", line 12, in __init__
    self.provider = classmap[provider]()
  File "/mnt/c/Users/dade/Desktop/sephiroth/providers/oci.py", line 7, in __init__
    self.source_ranges = self._get_ranges()
  File "/mnt/c/Users/dade/Desktop/sephiroth/providers/oci.py", line 16, in _get_ranges
    r = requests.get(aws_ip_ranges_url)
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/requests/api.py", line 75, in get
    return request('get', url, params=params, **kwargs)
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/requests/api.py", line 60, in request
    return session.request(method=method, url=url, **kwargs)
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/requests/sessions.py", line 533, in request
    resp = self.send(prep, **send_kwargs)
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/requests/sessions.py", line 646, in send
    r = adapter.send(request, **kwargs)
  File "/mnt/c/Users/dade/Desktop/sephiroth/venv/lib/python3.6/site-packages/requests/adapters.py", line 514, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='docs.cloud.oracle.com', port=443): Max retries exceeded with url: /en-us/iaas/tools/public_ip_ranges.json (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))
@0xdade 0xdade added bug Something isn't working Provider Support Requesting support for a particular provider labels Jun 6, 2020
0xdade added a commit that referenced this issue Jun 6, 2020
Additionally removes support for OCI temporarily due to #11.
@0xdade 0xdade closed this as completed Jun 24, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working Provider Support Requesting support for a particular provider
Projects
None yet
Development

No branches or pull requests

1 participant