SSLError at /browserid/verify/ SSL23_GET_SERVER_HELLO:unsupported protocol #53

Closed
graingert opened this Issue Mar 29, 2012 · 8 comments

Comments

Projects
None yet
3 participants
Contributor

graingert commented Mar 29, 2012

For some reason I'm getting this issue

http://dpaste.com/723490/

Any ideas?

Contributor

graingert commented Mar 29, 2012

It seems to be an issue with requests

requests.post("https://browserid.org/verify", data={})
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 84, in post
    return request('post', url, data=data, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 39, in request
    return s.request(method=method, url=url, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 203, in request
    r.send(prefetch=prefetch)
  File "/usr/local/lib/python2.7/dist-packages/requests/models.py", line 557, in send
    raise SSLError(e)
requests.exceptions.SSLError: [Errno 1] _ssl.c:504: error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol
Owner

Osmose commented Mar 29, 2012

Can you give a bit more info about the platform (OS is the main question)? I can't replicate this.

Contributor

graingert commented Mar 29, 2012

I'm running Ubuntu 12.04

I can connect fine using CURL and openssl

Contributor

graingert commented Mar 29, 2012

Using the packaged version I get a different error:

>>> requests.post("https://browserid.org/verify", data={})
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python2.7/dist-packages/requests/api.py", line 111, in post
    return request('post', url, data=data, **kwargs)
  File "/usr/lib/python2.7/dist-packages/requests/api.py", line 65, in request
    prefetch=prefetch
  File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 191, in request
    r.send(prefetch=prefetch)
  File "/usr/lib/python2.7/dist-packages/requests/models.py", line 459, in send
    raise Timeout('Request timed out.')
requests.exceptions.Timeout: Request timed out.
Contributor

graingert commented Mar 29, 2012

It seems all SSLv2 stuff is no longer supported see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=589706

Above timeout is actually an ssl error not properly raised by the available request version.

I tried the same with python-request version from ubuntu 12.04 (0.8.2-1) installed in ubuntu 11.04 and got Response [200]
natty still has openssl 0.9.8 with SSLv2

Osmose added a commit that referenced this issue Mar 29, 2012

Upgrade requirement to latest requests.
Should be a partial fix for #53.
Contributor

graingert commented Mar 30, 2012

Fixed in openssl (1.0.1-2ubuntu3) precise https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/965371

Python 2.7.3rc2 (default, Mar 22 2012, 04:35:15) 
[GCC 4.6.3] on linux2
Type "help", "copyright", "credits" or "license" for more information.
imp>>> import requests
>>> requests.get("https://browserid.org")
<Response [200]>

@graingert graingert closed this Mar 30, 2012

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment