SSLv3 Failure Authorization Failure
I am using python 2.6 on Debian 6.0 and am getting the following traceback
File "/home/pwal/api/env/lib/python2.6/site-packages/APNSWrapper/notifications.py", line 194, in notify
apnsConnection.connect(apnsHost, self.apnsPort)
File "/home/pwal/api/env/lib/python2.6/site-packages/APNSWrapper/connection.py", line 215, in connect
self.context().connect(host, port)
File "/home/pwal/api/env/lib/python2.6/site-packages/APNSWrapper/connection.py", line 161, in connect
self.connectionContext.connect((host, port))
File "/usr/lib/python2.6/ssl.py", line 295, in connect
self.do_handshake()
File "/usr/lib/python2.6/ssl.py", line 279, in do_handshake
self._sslobj.do_handshake()
SSLError: [Errno 1] _ssl.c:490: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
Can someone help me what should I do to resolve this error?
+3
source to share
1 answer
This bug is due to a recent OpenSSL SSL v3 vulnerability known as Poodle.
Apple (and many others) have disabled SSL v3, but APNSWrapper is clearly using SSL v3.
Never be afraid to fix it. Change this line of code:
ssl_version = self.ssl_module.PROTOCOL_SSLv3,
:
ssl_version = self.ssl_module.PROTOCOL_TLSv1,
On line APNSWrapper/connection.py
line 131.
Make sure to restart all running processes to compile the new code.
Also remember that you are updating the package, not your own code, so if you reinstall the APNSWrapper package on a different server, you will need to re-install the patch. Good luck!
+9
source to share