Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

linux builders need CA cert updated #540

Closed
edunham opened this issue Nov 29, 2016 · 2 comments
Closed

linux builders need CA cert updated #540

edunham opened this issue Nov 29, 2016 · 2 comments
Assignees

Comments

@edunham
Copy link
Contributor

@edunham edunham commented Nov 29, 2016

18:45:24 <@Manishearth> edunham: I think our linux buildslaves need their root cert store updated
18:45:34 <@Manishearth> they can't handle letsencrypt
18:45:40 <@Manishearth> (https://joshmatthews.net)
18:45:51 <@Manishearth> so python urllib2.urlopen or requests.get throws an error

@edunham edunham self-assigned this Nov 29, 2016
@Manishearth
Copy link
Member

@Manishearth Manishearth commented Nov 29, 2016

Working with an upgraded requests lib I get a better error message, linking me to https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings

>>> import requests
>>> requests.get("https://www.joshmatthews.net/intermittent-tracker/query.py?name=private")
/usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:334: SNIMissingWarning: An HTTPS request has been made, but the SNI (Subject Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  SNIMissingWarning
/usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:132: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  InsecurePlatformWarning

A quick fix is to turn off SSL verification.

The distro does not have an updated version of python available; but we could try using python3 for mach.

@edunham
Copy link
Contributor Author

@edunham edunham commented Nov 29, 2016

#542 should fix, thanks @Manishearth for figuring out what was up :)

@edunham edunham closed this Jul 14, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
2 participants
You can’t perform that action at this time.