Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Handshake failure on some urls #346

Closed
divadres opened this issue Mar 22, 2019 · 1 comment
Closed

Handshake failure on some urls #346

divadres opened this issue Mar 22, 2019 · 1 comment
Labels
duplicate problem is better described in some other issue

Comments

@divadres
Copy link

divadres commented Mar 22, 2019

Hello,
When I try to open some web I receive a 'handshake_failure' why can it be ?? An example is https://yape.nu, but there are more

  File "C:\Python27\lib\site-packages\tlslite\utils\deprecations.py", line 34, in wrapper
    return func(*args, **kwargs)
  File "C:\Python27\lib\site-packages\tlslite\tlsconnection.py", line 373, in handshakeClientCert
    for result in handshaker:
  File "C:\Python27\lib\site-packages\tlslite\tlsconnection.py", line 391, in _handshakeClientAsync
    for result in self._handshakeWrapperAsync(handshaker, checker):
  File "C:\Python27\lib\site-packages\tlslite\tlsconnection.py", line 2226, in _handshakeWrapperAsync
    for result in handshaker:
  File "C:\Python27\lib\site-packages\tlslite\tlsconnection.py", line 492, in _handshakeClientAsyncHelper
    for result in self._clientGetServerHello(settings, clientHello):
  File "C:\Python27\lib\site-packages\tlslite\tlsconnection.py", line 711, in _clientGetServerHello
    HandshakeType.server_hello):
  File "C:\Python27\lib\site-packages\tlslite\tlsrecordlayer.py", line 707, in _getMsg
    raise TLSRemoteAlert(alert)
tlslite.errors.TLSRemoteAlert: handshake_failure
@tomato42 tomato42 added the duplicate problem is better described in some other issue label Mar 22, 2019
@tomato42
Copy link
Member

The server does not have RSA certificates installed, only ECDSA:
ciphers

so when we advertise that we don't support ECDSA, it's the server (the "remote" part of TLSRemoteAlert) that rejects the connection as being unable to negotiate a shared set of algorithms (handshake_failure)

It's a known limitation: #52

There's a beginning of an implementation: #196, but nobody is actively working on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
duplicate problem is better described in some other issue
Projects
None yet
Development

No branches or pull requests

2 participants