[issue26867] test_ssl test_options fails on ubuntu 16.04

Xiang Zhang added the comment: New changeset c9ba186bcbb309278db028d33a57f039d587 by Xiang Zhang in branch '2.7': bpo-26867: Ubuntu's openssl OP_NO_SSLv3 is forced on by default; fix test. (GH-374) https://github.com/python/cpython/commit/c9ba186bcbb309278db028d33a57f039d587

[issue26867] test_ssl test_options fails on ubuntu 16.04

Changes by Xiang Zhang : -- resolution: -> fixed stage: -> resolved status: open -> closed versions: +Python 2.7 ___ Python tracker ___

[issue26867] test_ssl test_options fails on ubuntu 16.04

Changes by Xiang Zhang : -- pull_requests: +311 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.py

[issue26867] test_ssl test_options fails on ubuntu 16.04

Xiang Zhang added the comment: This test still fails with lastest Py2.7 on Ubuntu 16.10. Could we backport the patch to silence the failure? ./python -m test.regrtest test_ssl [1/1] test_ssl test test_ssl failed -- Traceback (most recent call last): File "/home/angwer/py2.7/Lib/test/test_ssl.

[issue26867] test_ssl test_options fails on ubuntu 16.04

Changes by Christian Heimes : -- assignee: -> christian.heimes components: +SSL nosy: +christian.heimes ___ Python tracker ___ ___ Py

[issue26867] test_ssl test_options fails on ubuntu 16.04

Xiang Zhang added the comment: Does this need to be backport to py2.7? It suffers from the same problem. -- ___ Python tracker ___ ___

[issue26867] test_ssl test_options fails on ubuntu 16.04

Roundup Robot added the comment: New changeset 4d04aca4afb0 by Matthias Klose in branch '3.5': Issue #26867: Ubuntu's openssl OP_NO_SSLv3 is forced on by default; fix test. https://hg.python.org/cpython/rev/4d04aca4afb0 New changeset 8f028d04df11 by Matthias Klose in branch '3.4': Issue #26867:

[issue26867] test_ssl test_options fails on ubuntu 16.04

Larry Hastings added the comment: Well, as Donald Rumsfeld said in 2008: "As you know, you go to war with the army you have, not the army you might want or wish to have at a later time." 3.5.2 final and 3.4.5 final will ship with Matthias's patch as proposed. FWIW I'd accept an improved patch

[issue26867] test_ssl test_options fails on ubuntu 16.04

Martin Panter added the comment: FWIW I had a quick look at ways to detect if you are running on Ubuntu. But platform.linux_distribution() seems to be deprecated and looks like it might have trouble differentiating Debian and Ubuntu. So it may be easier to just go with the current patch on all

[issue26867] test_ssl test_options fails on ubuntu 16.04

Larry Hastings added the comment: Well, I want this fixed in 3.5.2 final. If nobody can propose a better patch in the next 24 hours then I'm going with Matthias's patch. -- ___ Python tracker

[issue26867] test_ssl test_options fails on ubuntu 16.04

Martin Panter added the comment: FWIW I imagine Ubuntu overriding the option will break the example code in the documentation of clearing SSL_OP_NO_SSLv3: . If we keep that documentation, I think we should continue to tes

[issue26867] test_ssl test_options fails on ubuntu 16.04

Larry Hastings added the comment: That does seem like it'd make the test failure go away. But the fix seems a little Ubuntu-specific. Is it reasonable to do that when testing on every platform? -- ___ Python tracker

[issue26867] test_ssl test_options fails on ubuntu 16.04

Matthias Klose added the comment: Description: properly handle Ubuntu's openssl having OP_NO_SSLv3 forced on by default Author: Marc Deslauriers Forwarded: yes, http://bugs.python.org/issue25724 Index: b/Lib/test/test_ssl.py === -

[issue26867] test_ssl test_options fails on ubuntu 16.04

Changes by Christian Heimes : -- nosy: -christian.heimes ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https

[issue26867] test_ssl test_options fails on ubuntu 16.04

Larry Hastings added the comment: This still affects 3.4 and 3.5. It'd be lovely if it could be fixed in all the still-alive versions. (Yes, this is technically a "bug fix", but I'd still like it fixed in 3.4.) -- versions: +Python 3.4, Python 3.5 ___

[issue26867] test_ssl test_options fails on ubuntu 16.04

Matthias Klose added the comment: ubuntu doesn't do anything crazy, but just disables oldish, deprecated und probably now unsecure ssl protocols. This is done by other vendors as well. From my point of of view this skip_if_ubuntu stuff should be replaced by proper feature tests. I'll see i

[issue26867] test_ssl test_options fails on ubuntu 16.04

Larry Hastings added the comment: I got this when testing 3.5.2rc1 on my Ubuntu 16.04 machine. CAs Xiang Zhang showed, this is Ubuntu doing something crazy. I ignored the failure and shipped 3.5.2rc1, however I would be interested in suppressing the test for 3.5.2 final. That way it has a c

[issue26867] test_ssl test_options fails on ubuntu 16.04

Changes by SilentGhost : -- nosy: +SilentGhost versions: +Python 3.6 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscr

[issue26867] test_ssl test_options fails on ubuntu 16.04

Xiang Zhang added the comment: @skip_if_broken_ubuntu_ssl doesn't work in this case. `hasattr(ssl, 'PROTOCOL_SSLv2')` returns False. -- ___ Python tracker ___ __

[issue26867] test_ssl test_options fails on ubuntu 16.04

Ned Deily added the comment: I just spoke with @doko about this here at PyCon. I think we came to the conclusion it might be time to consider removing the old @skip_if_broken_ubuntu_ssl decorator and focus on making the tests work with the most recent releases since pretty much every distribu

[issue26867] test_ssl test_options fails on ubuntu 16.04

Martin Panter added the comment: This test is already decorated with @skip_if_broken_ubuntu_ssl. I’m not sure Python should go too far out of its way to handle downstream patches, but it seems there is a precedent here. -- nosy: +martin.panter ___ P

[issue26867] test_ssl test_options fails on ubuntu 16.04

Ned Deily added the comment: Can we close this as an Ubuntu-specific problem? -- nosy: +doko, ned.deily ___ Python tracker ___ ___ Pyt

[issue26867] test_ssl test_options fails on ubuntu 16.04

Xiang Zhang added the comment: >From the source code (get from apt-get source) of openssl-1.0.2g, I find SSL_CTX_clear_options(ctx, op): op &= ~SSL_OP_NO_SSLv3 return (ctx->options &= ~op) SSL_CTX_set_options(ctx, op): op |= SSL_OP_NO_SSLv3 return (ctx->options |= op) which differs from

[issue26867] test_ssl test_options fails on ubuntu 16.04

Xiang Zhang added the comment: After some test, I think the reason causing this error is due to SSL_CTX_clear_options. With OPENSSL_VERSION_NUMBER 268443775, SSL_CTX_clear_options(self->ctx, 2248147967) returns 33554432, where SSL_CTX_get_options returns 2248147967. From the manpage of SSL_C

[issue26867] test_ssl test_options fails on ubuntu 16.04

New submission from Xiang Zhang: test_options in test_ssl fails on Ubuntu 16.04. I don't know this is due to the newest ubuntu or a recent code change. But I checkout revision 9 and then rebuild and test, test_option still fails. The traceback is: FAIL: test_options (test.test_ssl.Context

[issue26867] test_ssl test_options fails on ubuntu 16.04

Changes by Xiang Zhang : -- nosy: xiang.zhang priority: normal severity: normal status: open title: test_ssl test_options fails on ubuntu 16.04 ___ Python tracker ___ ___