SSLv3 Handshake Failure

I'm coming across this more and more as I make use of published APIs to write plugins.

Is there an official fix that I (and users) need to do to make things work?

This plugin uses both websocket and requests, but it's the request that's failing at the moment.

Code: Select all

    def authenticate(self, username, password):
        auth_data = {
            "email": username,
            "password": password
        }

        # Create session
        self.s = requests.session()

        # Get auth token
        try:
            response = self.s.post(API_URL+'authenticate',
                                   auth_data, timeout=self.api_timeout)
        except Exception as e:
            raise Exception('Connection failure: %s' % e)

        # check for 200 return
        if response.status_code != 200:
            raise xAuthenticationException(
                "Please check username and password. API Return Code: %s" %
                response.status_code)
       
        self.set_auth_data(response.json())

Traceback (most recent call last):
File "plugin.py", line 32, in startup
File "/Library/Application Support/Perceptive Automation/Indigo 7.3/Plugins/x.indigoPlugin/Contents/Server Plugin/xyz/xyz.py", line 26, in authenticate
Exception: Connection failure: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:590)

MacOS Sierra 10.12.6
Indigo 7.3.0

I have a lot of plugins that use the requests library to connect to IoT type servers. I've never had that problem. But then, I've also never needed to use a session object either. Is that really required?

Oh, wait. You're using 10.12 Sierra? That's probably the issue. You don't have the SSL libs required for many websites now. There's been a lot of discussion about this in other threads. You really need to upgrade to 10.13 or 10.14. There's no other fix.

The FontAwesome api has the same error, but I just stripped the s off https as its only downloading icons.

This plugin is proper IoT and http throws 504 go away

If I don’t use session, I need to inwardly digest the api that GitHub has kindly pythonised and hack it to use other approach.

The SSLv3 is well published on stackoverflow etc, but I’m not a Mac person so my already-ingrained-hatred of SSL Certs on windows (part of my day job!) gets much harder having to understand it on Mac.


Sent from my iPad using Tapatalk Pro

It's not a cert issue. That's server-side only. It's the fact the the website is trying to enforce a certain (modern) SSL protocol and the Python install on 10.12 can't do it.

Thanks Ian. I can never remember the details. I just know it doesn't work.

Thanks, Mojave working fine.