Skip to content

PYTHON-3015 Update v3.12 docs about cipher mismatch #792

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 16, 2021
Merged

PYTHON-3015 Update v3.12 docs about cipher mismatch #792

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 8 additions & 6 deletions doc/examples/tls.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -250,18 +250,20 @@ revocation checking failed::

See :ref:`OCSP` for more details.

Python 3.10+ is incompatible with TLS/SSL on MongoDB <= 3.4
...........................................................
Python 3.10+ incompatibilities with TLS/SSL on MongoDB <= 4.0
.............................................................

Note that Python 3.10+ is incompatible with TLS/SSL on MongoDB <= 3.4. The
following are some example errors that may occur with this combination::
Note that `changes made to the ssl module in Python 3.10+
<https://docs.python.org/3/whatsnew/3.10.html#ssl>`_ may cause incompatibilities
with MongoDB <= 4.0. The following are some example errors that may occur with this
combination::

SSL handshake failed: localhost:27017: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:997)
SSL handshake failed: localhost:27017: EOF occurred in violation of protocol (_ssl.c:997)

The MongoDB server logs will show the following error::
The MongoDB server logs may show the following error::

2021-06-30T21:22:44.917+0100 E NETWORK [conn16] SSL: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher

To resolve this issue, use Python <=3.10, upgrade to MongoDB 3.6+, or install
To resolve this issue, use Python <=3.10, upgrade to MongoDB 4.2+, or install
pymongo with the :ref:`OCSP` extra which relies on PyOpenSSL.