Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Grant Edwards
nt >>certificate validation or allows the user to override the actual >>client certificate validation process. > > Note that Python does not do the certificate validation itself > but delegates this to the underlying SSL library. > Thus, this library would need to support

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Grant Edwards
On 2022-02-04, Christian Heimes wrote: > On 03/02/2022 19.57, Grant Edwards wrote: >> I've got a small ssl server app. I want to require a certificate from >> the client, so I'm using a context with >> >> context.verify_mode = ssl.CERT_REQUIRED >> &g

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Grant Edwards
On 2022-02-04, Barry wrote: >> >>> What you're doing is a little unusual, so my first thought would be to >>> subclass Context and override whatever method does the checks. >> >> I've done a dir() on the Context object, and I don't see anything that >> looks like a method to do the checks. I susp

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Grant Edwards
On 2022-02-04, Christian Heimes wrote: > On 04/02/2022 19.24, Grant Edwards wrote: >> The problem is _getting_ the client certificate that was provided >> during the client/server handshake. That's trivial if the handshake >> was successful. The problem is obtaining the client certificate when >>

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Dieter Maurer
erride the actual >client certificate validation process. Note that Python does not do the certificate validation itself but delegates this to the underlying SSL library. Thus, this library would need to support your use case. It may not as your scenario is quite special. -- https://mail.python.org/mailman/listinfo/python-list

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Christian Heimes
On 04/02/2022 19.24, Grant Edwards wrote: The problem is _getting_ the client certificate that was provided during the client/server handshake. That's trivial if the handshake was successful. The problem is obtaining the client certificate when the handshake fails. I was hoping there was a way to

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Christian Heimes
On 03/02/2022 19.57, Grant Edwards wrote: I've got a small ssl server app. I want to require a certificate from the client, so I'm using a context with context.verify_mode = ssl.CERT_REQUIRED But, I want all certificates accepted. How do I disable client certificate verification?

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Barry
> On 4 Feb 2022, at 18:17, Grant Edwards wrote: > > On 2022-02-04, Chris Angelico wrote: >>> On Fri, 4 Feb 2022 at 09:37, Grant Edwards >>> wrote: >>> I've looked through the ssl.Context documentation multiple times, and >>> haven't been able to spot any option or flag that disables client

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Grant Edwards
ter >> how "invalid" it is. >> > > Does `openssl x509 -in -text -noout` do what you want? Where does come from? >> I just don't want it validated by the SSL layer: I want to print it >> out. That seems to be trivial to do for server certificates usi

Re: ssl server: how to disable client cert verfication?

2022-02-04 Thread Grant Edwards
On 2022-02-04, Chris Angelico wrote: > On Fri, 4 Feb 2022 at 09:37, Grant Edwards wrote: >> I've looked through the ssl.Context documentation multiple times, and >> haven't been able to spot any option or flag that disables client >> certificate validation or allows the user to override the actua

Re: ssl server: how to disable client cert verfication?

2022-02-03 Thread Kushal Kumaran
On Thu, Feb 03 2022 at 01:32:04 PM, Grant Edwards wrote: > On 2022-02-03, Kushal Kumaran wrote: > >> On Thu, Feb 03 2022 at 10:57:56 AM, Grant Edwards >> wrote: >>> I've got a small ssl server app. I want to require a certificate from >>>

Re: ssl server: how to disable client cert verfication?

2022-02-03 Thread Chris Angelico
On Fri, 4 Feb 2022 at 09:37, Grant Edwards wrote: > I've looked through the ssl.Context documentation multiple times, and > haven't been able to spot any option or flag that disables client > certificate validation or allows the user to override the actual > client certificate validation process.

Re: ssl server: how to disable client cert verfication?

2022-02-03 Thread Grant Edwards
On 2022-02-03, Barry wrote: > >> [...] I just want to require that the client provide a certificate >> and then print it out using print(connection.getpeercert()) > > I am not near the pc with the code on. But in outline you provide a > ssl context that returns true for th

Re: ssl server: how to disable client cert verfication?

2022-02-03 Thread Barry
> On 3 Feb 2022, at 21:34, Grant Edwards wrote: > > On 2022-02-03, Kushal Kumaran wrote: > >>> On Thu, Feb 03 2022 at 10:57:56 AM, Grant Edwards >>> wrote: >>> I've got a small ssl server app. I want to require a certificate from

Re: ssl server: how to disable client cert verfication?

2022-02-03 Thread Grant Edwards
On 2022-02-03, Kushal Kumaran wrote: > On Thu, Feb 03 2022 at 10:57:56 AM, Grant Edwards > wrote: >> I've got a small ssl server app. I want to require a certificate from >> the client, so I'm using a context with >> >> context.verify_mode = ssl.CERT_REQ

Re: ssl: why wrap newly accept()ed connections?

2022-02-03 Thread Grant Edwards
On 2022-02-03, Kushal Kumaran wrote: > >> [...] >> However, example server code I've found does not wrap the newly >> accepted connection. I've checked, and newsocket is already an >> object. [...] >> >> What is the purpose of wrapping newsocket? > > That section is talking about using an "ordina

Re: ssl server: how to disable client cert verfication?

2022-02-03 Thread Kushal Kumaran
On Thu, Feb 03 2022 at 10:57:56 AM, Grant Edwards wrote: > I've got a small ssl server app. I want to require a certificate from > the client, so I'm using a context with > > context.verify_mode = ssl.CERT_REQUIRED > > But, I want all certificates accepted. How do I

Re: ssl: why wrap newly accept()ed connections?

2022-02-03 Thread Kushal Kumaran
On Thu, Feb 03 2022 at 11:17:17 AM, Grant Edwards wrote: > According to the docs, when you accept() an ssl connection, > you need to wrap the new connection: > > https://docs.python.org/3/library/ssl.html?highlight=ssl#ssl-sockets > >When a client connects, you’ll ca

ssl: why wrap newly accept()ed connections?

2022-02-03 Thread Grant Edwards
According to the docs, when you accept() an ssl connection, you need to wrap the new connection: https://docs.python.org/3/library/ssl.html?highlight=ssl#ssl-sockets When a client connects, you’ll call accept() on the socket to get the new socket from the other end, and use the context’s

ssl server: how to disable client cert verfication?

2022-02-03 Thread Grant Edwards
I've got a small ssl server app. I want to require a certificate from the client, so I'm using a context with context.verify_mode = ssl.CERT_REQUIRED But, I want all certificates accepted. How do I disable client certificate verification? -- Grant -- https://mail.python.org/mailma

Re: Simple SSL client hangs

2021-07-14 Thread Loris Bennett
Hi, MRAB writes: > On 2021-07-13 08:50, Loris Bennett wrote: >> Hi, >> >> In Perl I have the following >> >>use IO::Socket::SSL; >> >>my $my_socket = new IO::Socket::SSL(PeerAddr => 'some.server.somewhere, &g

Re: Simple SSL client hangs

2021-07-13 Thread MRAB
On 2021-07-13 08:50, Loris Bennett wrote: Hi, In Perl I have the following use IO::Socket::SSL; my $my_socket = new IO::Socket::SSL(PeerAddr => 'some.server.somewhere, PeerPort => 12345, );

Re: Simple SSL client hangs

2021-07-13 Thread Douglas Wells
In article <871r821wlg@hornfels.zedat.fu-berlin.de>, Loris Bennett wrote: >In Perl I have the following > > use IO::Socket::SSL; > my $my_socket = new IO::Socket::SSL(PeerAddr => 'some.server.somewhere, >

Simple SSL client hangs

2021-07-13 Thread Loris Bennett
Hi, In Perl I have the following use IO::Socket::SSL; my $my_socket = new IO::Socket::SSL(PeerAddr => 'some.server.somewhere, PeerPort => 12345, ); my $line = <$my_socket>; print("$line

Re: SSL certificate issue

2021-03-18 Thread Paul Bryan
In order for us to help, we'll need to know the details of your problem. On Thu, 2021-03-18 at 10:58 +, Sagar, Neha wrote: > Hi, > > I am facing SSL certificate issue working with python. Can you help > me on this. > > Thanks, > Neha > > DXC Technology

Re: SSL certificate issue

2021-03-18 Thread Dieter Maurer
Sagar, Neha wrote at 2021-3-18 10:58 +: >I am facing SSL certificate issue working with python. Can you help me on this. Python does not directly operate on SSL certificates. Usually, certificates for trusted CAs (= "Certificate Authorities") are stored at a standard place (depe

SSL certificate issue

2021-03-18 Thread Sagar, Neha
Hi, I am facing SSL certificate issue working with python. Can you help me on this. Thanks, Neha DXC Technology India Private Limited - Unit 13, Block 2, SDF Buildings, MEPZ SEZ, Tambaram, Chennai 600 045, Tamil Nadu. Registered in India, CIN: U72900TN2015FTC102489. DXC Technology Company

Re: SSL/TLS certificate verification suddenly broken, Python 3 on Windows 10

2021-02-16 Thread Michał Jaworski
021, o godz. 16:42: > > Hi All, > > I ran into an error I, so far, cannot explain regarding Python's general > ability to communicate via SSL/TLS. > > I'm using Python a lot to communicate with web servers and APIs, which > worked just fine until yesterday (o

SSL/TLS certificate verification suddenly broken, Python 3 on Windows 10

2021-02-16 Thread Carlos Andrews
Hi All, I ran into an error I, so far, cannot explain regarding Python's general ability to communicate via SSL/TLS. I'm using Python a lot to communicate with web servers and APIs, which worked just fine until yesterday (or somewhen late last week). I first noticed yesterday, when

Re: ssl connection has been closed unexpectedly

2020-11-29 Thread Dan Stromberg
ep getting the following error when I use engine = > create_engine(logging in details to postgres) > df.to_sql('table_name', and etc.) > > > OperationalError: (psycopg2.OperationalError) SSL connection has been > closed unexpectedly > > (Backgroun

Re: ssl connection has been closed unexpectedly

2020-11-29 Thread Dieter Maurer
Shaozhong SHI wrote at 2020-11-28 23:29 +: >I keep getting the following error when I use engine = >create_engine(logging in details to postgres) >df.to_sql('table_name', and etc.) > > >OperationalError: (psycopg2.OperationalError) SSL connection has been >cl

ssl connection has been closed unexpectedly

2020-11-28 Thread Shaozhong SHI
Hi, I keep getting the following error when I use engine = create_engine(logging in details to postgres) df.to_sql('table_name', and etc.) OperationalError: (psycopg2.OperationalError) SSL connection has been closed unexpectedly (Background on this error at: http://sqlalche.me

Re: SSL Certificate Verify Failed (_ssl.c:600) using Windows Server 2019

2020-04-30 Thread Dieter Maurer
separated wrote at 2020-5-1 02:51 +: > ... >but I still dont know why when I running a command 'youtube-dl -U' then got a >message 'ERROR: can't find the current version. Please try again later' maybe >it needs a sudo password. This looks like a log message (the "ERROR" likely comes from thi

Re: SSL Certificate Verify Failed (_ssl.c:600) using Windows Server 2019

2020-04-30 Thread separated via Python-list
ICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:600)> (caused > > by URLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate > > verify failed (_ssl.c:600)'),)) > > Either the ssl certificate provided by the server is invalid > or Python lacks th

Re: SSL Certificate Verify Failed (_ssl.c:600) using Windows Server 2019

2020-04-30 Thread Dieter Maurer
nable to download webpage: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:600)> (caused by >URLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify >failed (_ssl.c:600)'),)) Either the ssl certificate provided by the server is invalid or Python lacks the n

Re: SSL Certificate Verify Failed (_ssl.c:600) using Windows Server 2019

2020-04-30 Thread separated via Python-list
t; > ERROR: Unable to download webpage: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:600)> (caused by > URLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify > failed (_ssl.c:600)'),)) > > Im operating system is windows server 2019, I have trie

SSL Certificate Verify Failed (_ssl.c:600) using Windows Server 2019

2020-04-29 Thread separated via Python-list
(caused by URLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:600)'),)) Im operating system is windows server 2019, I have tried running youtube-dl from windows server 2016 but it works fine without any settings necessary. I hope I can get the answer her

Re: SSL/TLS in Python using STARTTLS and ssl/ssltelnet and telnetlib

2019-11-07 Thread Grant Edwards
On 2019-11-07, Jon Ribbens via Python-list wrote: > On 2019-11-07, Veek M wrote: >> Could someone suggest some introductory reading material that will allow >> me to use 'telnetlib' with 'ssl' or 'ssltelnet'. >> (currently using Pan since Kn

Re: SSL/TLS in Python using STARTTLS and ssl/ssltelnet and telnetlib

2019-11-07 Thread Jon Ribbens via Python-list
On 2019-11-07, Veek M wrote: > Could someone suggest some introductory reading material that will allow > me to use 'telnetlib' with 'ssl' or 'ssltelnet'. > (currently using Pan since Knode is dropped on Debian) > > I'm trying to write somethi

Re: SSL/TLS in Python using STARTTLS and ssl/ssltelnet and telnetlib

2019-11-07 Thread Colin McPhail via Python-list
> On 7 Nov 2019, at 03:24, Veek M wrote: > > Could someone suggest some introductory reading material that will allow > me to use 'telnetlib' with 'ssl' or 'ssltelnet'. > (currently using Pan since Knode is dropped on Debian) > > I'

SSL/TLS in Python using STARTTLS and ssl/ssltelnet and telnetlib

2019-11-06 Thread Veek M
Could someone suggest some introductory reading material that will allow me to use 'telnetlib' with 'ssl' or 'ssltelnet'. (currently using Pan since Knode is dropped on Debian) I'm trying to write something that will download the NNTP headers over TLS. Th

ssl certificate issue while installing Django on y windows 64 bit os

2019-09-01 Thread mohd zak
Sent from Mail for Windows 10 -- https://mail.python.org/mailman/listinfo/python-list

RE: python3.7.2 won't compile with SSL support (solved)

2019-02-21 Thread Felix Lazaro Carbonell
Incredibly: ./configure --with-ssl=/usr/include/openssl/ Made the trick!! Although --with-ssl is not documented in ./configure --help. Cheers, Felix. -- https://mail.python.org/mailman/listinfo/python-list

Re: python3.7.2 won't compile with SSL support

2019-02-21 Thread Kushal Kumaran
"Felix Lazaro Carbonell" writes: > Hello: > > > > I'm trying to install python3.7.2 from source in debian9.8 but it doesn't > compile with SSL. > > > > I already installed openssl > > > > And ./configure -with-openssl=/usr/in

python3.7.2 won't compile with SSL support

2019-02-21 Thread Felix Lazaro Carbonell
Hello: I'm trying to install python3.7.2 from source in debian9.8 but it doesn't compile with SSL. I already installed openssl And ./configure -with-openssl=/usr/include/openssl/ yields: checking for openssl/ssl.h in /usr/include/openssl/... no and ssl.h is certain

Pycharm issue with import ssl

2018-12-26 Thread Gunasekar Rajendran
s\JetBrains\PyCharm Community Edition 2018.3.2\helpers\third_party\thriftpy\_shaded_thriftpy\transport\sslsocket.py", line 7, in import ssl File "C:\Users\grajendran\Anaconda3\lib\ssl.py", line 98, in import _ssl # if we can't import it, let the error prop

Re: giving error during installation (ez_setup.py given error could not create ssl/tls secure channel)

2018-09-17 Thread dieter
Syed Shujaat writes: > can you please help regarding this problem. ez_setup.py given error could not > create ssl/tls secure channel Apparently, "ez_setup.py" tries to upgrade a transport communication channel with SSL (= "Secure Socket Layer") or TLS (= "Trans

giving error during installation (ez_setup.py given error could not create ssl/tls secure channel)

2018-09-17 Thread Syed Shujaat
Hello, can you please help regarding this problem. ez_setup.py given error could not create ssl/tls secure channel Regards Syed Shujaat -- https://mail.python.org/mailman/listinfo/python-list

Re: How to use asyncore with SSL?

2018-01-22 Thread breamoreboy
On Thursday, January 18, 2018 at 11:25:58 PM UTC, Grant Edwards wrote: > I've been trying to use the secure smtpd module from > https://github.com/bcoe/secure-smtpd, but the SSL support seems to be > fundamentally broken. That module simply wraps a socket and then > expects

Re: How to use asyncore with SSL?

2018-01-21 Thread Marko Rauhamaa
Grant Edwards : > On 2018-01-20, Marko Rauhamaa wrote: >> Also, a subsidiary thread is not necessary. Everything can be done >> within an async framework (in C anyway). > > Of course it can. But (ISTM) either the async framework has to be > SSL-aware, or the socket

Re: How to use asyncore with SSL?

2018-01-20 Thread Grant Edwards
On 2018-01-20, Marko Rauhamaa wrote: > Grant Edwards : [...] >> I won't argue with that. I think that non-blocking ssl-wrapped >> sockets _should_ have the same select/poll/send/recv API/semantics >> that normal sockets do. I thought about writing my own >> wr

Re: How to use asyncore with SSL?

2018-01-20 Thread Marko Rauhamaa
uplex >> connection. Shame. >> >> The WANT_READ/WANT_WRITE silliness should be abstracted out of the >> non-blocking TLS library so the application doesn't need to know >> anything about it. > > I won't argue with that. I think that non-blocking ssl-wrap

Re: How to use asyncore with SSL?

2018-01-20 Thread Grant Edwards
On 2018-01-20, Marko Rauhamaa wrote: > Grant Edwards : > >> Asyncore seems to be based on fundamental assumptions that aren't true >> for non-blocking ssl sockets. > > Pot calling kettle black. > > OpenSSL isn't the easiest beast to deal with, but I have

Re: How to use asyncore with SSL?

2018-01-20 Thread Marko Rauhamaa
Grant Edwards : > Asyncore seems to be based on fundamental assumptions that aren't true > for non-blocking ssl sockets. Pot calling kettle black. OpenSSL isn't the easiest beast to deal with, but I have been able to abstract it (in C) so it behaves very close to TCP. The one b

Re: How to use asyncore with SSL?

2018-01-20 Thread Grant Edwards
On 2018-01-18, Grant Edwards wrote: [regarding secure-smtpd -- a module based on smtpd and asyncore] > That makes the SSL support pretty much useless. > > I'm trying to fix that, but I can't find any information or > documentation about using asyncore with SSL. Asyncor

Re: How to use asyncore with SSL?

2018-01-19 Thread Grant Edwards
On 2018-01-19, Marko Rauhamaa wrote: > Grant Edwards : > >> I've been trying to use the secure smtpd module from >> https://github.com/bcoe/secure-smtpd, but the SSL support seems to be >> fundamentally broken. [...] >> I'm trying to fix that, but I can&#x

Re: How to use asyncore with SSL?

2018-01-18 Thread Marko Rauhamaa
Grant Edwards : > I've been trying to use the secure smtpd module from > https://github.com/bcoe/secure-smtpd, but the SSL support seems to be > fundamentally broken. That module simply wraps a socket and then > expects to use it in the normal way via asyncore. > > Of cour

How to use asyncore with SSL?

2018-01-18 Thread Grant Edwards
I've been trying to use the secure smtpd module from https://github.com/bcoe/secure-smtpd, but the SSL support seems to be fundamentally broken. That module simply wraps a socket and then expects to use it in the normal way via asyncore. Of course that fails the first time an ssl-wr

Re: requests / SSL blocks forever?

2018-01-16 Thread Nagy László Zsolt
>> Or maybe I misunderstood the docs and the timeout means the max. time >> elapsed between receiving two chunks of data from the server? > Yes. It's documented better here: > http://docs.python-requests.org/en/master/user/advanced/#timeouts > > You can't specify a "total time" within which the op

Re: requests / SSL blocks forever?

2018-01-15 Thread Jon Ribbens
On 2018-01-15, Nagy László Zsolt wrote: >> In other words: if the server starts to send the response, but then >> stops sending it (without closing the connection), then this will block >> forever anyway. > Or maybe I misunderstood the docs and the timeout means the max. time > elapsed between rec

Re: requests / SSL blocks forever?

2018-01-15 Thread Nagy László Zsolt
> In other words: if the server starts to send the response, but then > stops sending it (without closing the connection), then this will block > forever anyway. Or maybe I misunderstood the docs and the timeout means the max. time elapsed between receiving two chunks of data from the server? --

Re: requests / SSL blocks forever?

2018-01-15 Thread Nagy László Zsolt
> (a) are you setting daemon=True on the thread? > (b) are you setting a timeout on the requests call? Hmm setting the timeout might not be the solution. This is from the docs of the requests module: > > Note > > |timeout| is not a time limit on the entire response download; rather, > an exception

Re: requests / SSL blocks forever?

2018-01-15 Thread Nagy László Zsolt
2018. 01. 13. 15:03 keltezéssel, Jon Ribbens írta: > On 2018-01-13, Nagy László Zsolt wrote: >> I have a multi threaded Windows service written in Python. It is running >> on 3.6.2.  Sometimes I cannot stop the service, because on of the >> threads won't exit. I have narrowed down the problem to

Re: requests / SSL blocks forever?

2018-01-13 Thread Jon Ribbens
On 2018-01-13, Nagy László Zsolt wrote: > I have a multi threaded Windows service written in Python. It is running > on 3.6.2.  Sometimes I cannot stop the service, because on of the > threads won't exit. I have narrowed down the problem to request and > _lib.SSL_read. (a) are you setting daemon=

Re: requests / SSL blocks forever?

2018-01-13 Thread Thomas Jollans
On 13/01/18 11:34, Nagy László Zsolt wrote: > Hi! > > I have a multi threaded Windows service written in Python. It is running > on 3.6.2.  Sometimes I cannot stop the service, because on of the > threads won't exit. I have narrowed down the problem to request and > _lib.SSL_read. I have used a mo

requests / SSL blocks forever?

2018-01-13 Thread Nagy László Zsolt
Hi! I have a multi threaded Windows service written in Python. It is running on 3.6.2.  Sometimes I cannot stop the service, because on of the threads won't exit. I have narrowed down the problem to request and _lib.SSL_read. I have used a modified version of this gem: http://code.activestate.com/

Re: ssl.SSLError: [SSL: UNKNOWN_PROTOCOL] unknown protocol

2017-12-18 Thread Piyush Verma
0.9.8zh 14 Jan 2016 (virtenv) $ openssl version OpenSSL 1.0.2n 7 Dec 2017 In my python code when I printed the ssl version, python still taking the system installed ssl version in my Mac OS. I think same problem in my code, how can I make python to understand to take latest ssl? import ssl

Re: ssl.SSLError: [SSL: UNKNOWN_PROTOCOL] unknown protocol

2017-12-17 Thread Chris Angelico
On Mon, Dec 18, 2017 at 6:28 AM, Piyush Verma <114piy...@gmail.com> wrote: > Yes Dieter, I see that it is connecting with 443 port number and service is > running. Is this related to python version or mac? Can you confirm that it really is an HTTPS server, not just an HTTP server that's running on

Re: ssl.SSLError: [SSL: UNKNOWN_PROTOCOL] unknown protocol

2017-12-17 Thread dieter
Piyush Verma <114piy...@gmail.com> writes: > Yes Dieter, I see that it is connecting with 443 port number and service is > running. Is this related to python version or mac? It might be. Python does not perform the SSL handling itself but delegates it to an external SSL library (&q

Re: ssl.SSLError: [SSL: UNKNOWN_PROTOCOL] unknown protocol

2017-12-17 Thread Piyush Verma
e: > Piyush Verma <114piy...@gmail.com> writes: > > > Getting SSL error while connecting from httplib.HTTPSConnection. > > > > Any help would be appreciated. > > ... > > line 579, in __init__ > > self.do_handshake() > > File > > &q

Re: ssl.SSLError: [SSL: UNKNOWN_PROTOCOL] unknown protocol

2017-12-16 Thread dieter
Piyush Verma <114piy...@gmail.com> writes: > Getting SSL error while connecting from httplib.HTTPSConnection. > > Any help would be appreciated. > ... > line 579, in __init__ > self.do_handshake() > File > "/System/Library/Frameworks/Python.framewor

ssl.SSLError: [SSL: UNKNOWN_PROTOCOL] unknown protocol

2017-12-15 Thread Piyush Verma
Getting SSL error while connecting from httplib.HTTPSConnection. Any help would be appreciated. self.connection.request(method, request, payload, self.headers) File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 1053, in reques

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Christian Heimes
On 2017-08-04 17:11, Robin Becker wrote: > On 04/08/2017 15:12, Irmen de Jong wrote: >> On 04/08/2017 15:44, Robin Becker wrote: > .. >> You can specify a CAcert using load_verify_locations on the ssl >> context. Is that what >> you meant? I figured out that

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Robin Becker
On 04/08/2017 15:12, Irmen de Jong wrote: On 04/08/2017 15:44, Robin Becker wrote: .. You can specify a CAcert using load_verify_locations on the ssl context. Is that what you meant? I figured out that if you set that to the peer's certificate it will then be yes I thi

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Irmen de Jong
> However, if > I control the cluster can I not just distribute the cert to all members and > have them > validate it against itself or does python refuse to do that? I vaguely > remember some > python apis allow the authority chain to be specified. You can specify a CAcert u

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Robin Becker
.. Hi Robin I am not sure how this is any benefit over the self-signed root certs that I now use? Except for the fact that these are a root cert as well and don't use any CA trust chain. To be able to validate this cert, I have to load it as a CA cert on the validating side. Which i

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Irmen de Jong
On 03/08/2017 20:30, Irmen de Jong wrote: > Alternatively, is there a cheap way to get an 'official' SSL certificate for > testing > purposes. I don't think letsencrypt can help here because it is only for web > sites? > (and their certs are only valid for a very

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Irmen de Jong
On 04/08/2017 10:26, Robin Becker wrote: > On 03/08/2017 19:30, Irmen de Jong wrote: > . >> >> I wonder if any current (or new) users of Pyro4 want to check this out? The >> biggest >> concern I have is that I only have dummy (self-signed) certificates so I >> can't test it >> with "real"

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Robin Becker
On 03/08/2017 19:30, Irmen de Jong wrote: . I wonder if any current (or new) users of Pyro4 want to check this out? The biggest concern I have is that I only have dummy (self-signed) certificates so I can't test it with "real" certs to see if the validation works correctly. .. I'

SSL/TLS support in Pyro4

2017-08-03 Thread Irmen de Jong
tools or systems to provide this (such as VPN or SSL tunneling). Until now: I've finally started adding SSL/TLS support to Pyro4 itself. The work-in-progress 4.62 version has it (git master branch). Docs are still lacking right now but there is a working ssl example included. I wonder if a

Ciphers in SSL Library

2017-06-15 Thread Kacy Night
hen client tries to connect with it the handshake fails because server raises error = No Shared Cipher and when I skipped handshake and used at client it said that server had none, but I've selected the RC4-SHA cipher. I've tried to modify the SSL library but it didn't change anythin

Re: Ciphers in SSL library python.

2017-06-14 Thread Ray Cote
On Wed, Jun 14, 2017 at 4:40 PM, wrote: > Hey, I'm "the server(I've written using ssl/socket)" and my client is > using RC4-SHA, but I can't make the server to use it. I make " > ciphers='RC4-SHA' " in the ssl.wrap_socket. Do I need to mod

Re: Ciphers in SSL library python.

2017-06-14 Thread djnight538
To Ray Cote: Hey, I'm "the server(I've written using ssl/socket)" and my client is using RC4-SHA, but I can't make the server to use it. I make " ciphers='RC4-SHA' " in the ssl.wrap_socket. Do I need to modify SSL file or something to make it work?

Re: Ciphers in SSL library python.

2017-06-14 Thread Ray Cote
Hey, I want to use RC4-SHA in python, but when I try to use it, it doesn't > get used (If I do cipher() it says none(and handshake fails too)), I've > tried to modify the SSL library, but it didn't help at all(Maybe I did > something wrong, any help will be appreciated). Is t

Ciphers in SSL library python.

2017-06-14 Thread djnight538
Hey, I want to use RC4-SHA in python, but when I try to use it, it doesn't get used (If I do cipher() it says none(and handshake fails too)), I've tried to modify the SSL library, but it didn't help at all(Maybe I did something wrong, any help will be appreciated). Is there a way

Re: SSL certificate of a server on Windows

2017-05-24 Thread COPIN Mathieu.
lient, -showcerts, -connect, hostname:port) > > > > > > But the thing is to do it without openssl because I want to run the script > > on Windows. > > > > Any suggestions ? > > Mathieu > > > > I guess you mean: without calling "openssl.

Re: SSL certificate of a server on Windows

2017-05-23 Thread Irmen de Jong
se I want to run the script on > Windows. > > Any suggestions ? > Mathieu > I guess you mean: without calling "openssl.exe" import ssl cert = sll.get_server_certificate(("www.google.com", 443)) See https://docs.python.org/3.6/library/ssl.html#ssl.get_

SSL certificate of a server on Windows

2017-05-23 Thread COPIN Mathieu.
Hi, I want to get a server certificate from the host-name. I know I could do something like : > call(openssl, s_client, -showcerts, -connect, hostname:port) But the thing is to do it without openssl because I want to run the script on Windows. Any suggestions ? Mathieu -- https://mail.pytho

Re: 'module' object has no attribute 'wrap_socket' when use ssl

2017-04-15 Thread Ho Yeung Lee
On Saturday, April 15, 2017 at 3:18:58 PM UTC+8, Peter Otten wrote: > Ho Yeung Lee wrote: > > > Python 2.7.6 (default, Jun 22 2015, 18:00:18) > > [GCC 4.8.2] on linux2 > > Type "help", "copyright", "credits" or "license" for more inf

Re: 'module' object has no attribute 'wrap_socket' when use ssl

2017-04-15 Thread Peter Otten
Ho Yeung Lee wrote: > Python 2.7.6 (default, Jun 22 2015, 18:00:18) > [GCC 4.8.2] on linux2 > Type "help", "copyright", "credits" or "license" for more information. >>>> import ssl > Traceback (most recent call last): > File &q

'module' object has no attribute 'wrap_socket' when use ssl

2017-04-15 Thread Ho Yeung Lee
Python 2.7.6 (default, Jun 22 2015, 18:00:18) [GCC 4.8.2] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> import ssl Traceback (most recent call last): File "", line 1, in File "/home/martin/

Re: How to configure trusted CA certificates for SSL client?

2017-02-07 Thread MeV
On Tuesday, February 7, 2017 at 9:42:54 AM UTC-8, Yang, Gang CTR (US) wrote: > My question is where does SSL client code get the trusted CA certificates > from, from Python or the underlying OS? What configuration do I need in order > for the SSL client to conduct the SSL handshake suc

How to configure trusted CA certificates for SSL client?

2017-02-07 Thread Yang, Gang CTR (US)
Hi, I'm using Python 3.X (3.5 on Windows 2008 and 3.4 on CentOS 6.7) and encountered an SSL client side CA certificates issue. The issue came up when a third-party package (django-cas-ng) tried to verify the CAS service ticket (ST) by calling CAS server using requests.get(...) and f

How to configure SSL client trusted CA certificates?

2017-02-07 Thread gangyang7
Hi, I'm using Python 3.X (3.5 on Windows 2008 and 3.4 on CentOS 6.7) and encountered an SSL client side CA certificates issue. The issue came up when a third-party package (django-cas-ng) tried to verify the CAS service ticket (ST) by calling CAS server using requests.get(...) and f

Re: Is Python SSL API thread-safe?

2017-01-28 Thread Grant Edwards
On 2017-01-22, Christian Heimes wrote: > OpenSSL and Python's ssl module are thread-safe. However IO is not > safe concerning reentrancy. You cannot safely share a SSLSocket > between threads without a mutex. Certain aspects of the TLS protocol > can cause interesting side effec

Re: Is Python SSL API thread-safe?

2017-01-22 Thread Grant Edwards
On 2017-01-22, Christian Heimes wrote: > On 2017-01-22 21:18, Grant Edwards wrote: >> Is the Python SSL API thread-safe with respect to recv() and send()? >> >> IOW, can I have one thread doing blocking recv() calls on an SSL >> connection object while "simultaneo

Re: Is Python SSL API thread-safe?

2017-01-22 Thread Christian Heimes
On 2017-01-22 21:18, Grant Edwards wrote: > Is the Python SSL API thread-safe with respect to recv() and send()? > > IOW, can I have one thread doing blocking recv() calls on an SSL > connection object while "simultaneously" a second thread is calling > send() on th

Re: Is Python SSL API thread-safe?

2017-01-22 Thread Jon Ribbens
On 2017-01-22, Grant Edwards wrote: > Is the Python SSL API thread-safe with respect to recv() and send()? > > IOW, can I have one thread doing blocking recv() calls on an SSL > connection object while "simultaneously" a second thread is calling > send() on that same co

Is Python SSL API thread-safe?

2017-01-22 Thread Grant Edwards
Is the Python SSL API thread-safe with respect to recv() and send()? IOW, can I have one thread doing blocking recv() calls on an SSL connection object while "simultaneously" a second thread is calling send() on that same connection object? I assumed that was allowed, but I can'

Re: HTTPServer and SSL

2016-04-17 Thread Terry Reedy
On 4/18/2016 1:39 AM, Terry Reedy wrote: My apologies for the tired, twitchy finger junk post that I noticed 1/2 second after clicking the wrong button and I wish I oould delete. -- Terry Jan Reedy -- https://mail.python.org/mailman/listinfo/python-list

  1   2   3   4   5   6   >