[SOLVED] SHA256 has arrived; OpenSSL update needed

[blackwind]

In the past few days, Google has apparently started enforcing SHA256 over TLS, so I now get the following error when trying to authenticate:

Code: Select all

SSLHandshakeError: [Errno 1] _ssl.c:480: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm

According to this page, OpenSSL v0.9.8o (or higher) is needed to connect to sites that require SHA256. Could you spin up a new build for me ASAP with the latest OpenSSL, Pako? As is, my configuration is largely crippled.

[krambriw]

I think I stumbled into the same type of problem earlier...

For 'long' time (since 1.5 years) I had a perfectly working plugin using the 'requests' library that suddenly did not work any longer when logging on to the same web site. It generated "SSL InsecurePlatform error when using Requests package". On Stackoverflow I found several postings about this issue that seemed to be related to what Python version you are using. Affected is versions earlier than 2.7.9 (EG is using 2.6.5).
http://stackoverflow.com/questions/2909 ... ts-package

I tried the suggested actions and manually added those recommended libraries (pyOpenSSL, ndg-httpsclient, pyasn1) to 'lib26/site-packages' but so far without success

My solution was at the end not that bad: I divided the plugin functionality into two parts, moved the part using 'requests' to a Raspberry Pi where I run a python script using python3. Basically the same code worked without problems after adopting some python3 modifications. Communication between the two parts happens via MQTT.

Would of course be great to get it work in EG again.

[blackwind]

Since Pako appears to be MIA at the moment, I've come up with a temporary workaround: Simply drop in the updated win32 _ssl.pyd found here. Hope this helps you as well, Walter.

[krambriw]

Thanks for this hint, this needs to be checked, hopefully my old plug starts working again
(Pako is on vacation and will be back later this autumn)

[Pako]

Dear Walter !

I think I stumbled into the same type of problem earlier...
For 'long' time (since 1.5 years) I had a perfectly working plugin using the 'requests' library that suddenly did not work any longer when logging on to the same web site. It generated "SSL InsecurePlatform error when using Requests package". On Stackoverflow I found several postings about this issue that seemed to be related to what Python version you are using. Affected is versions earlier than 2.7.9 (EG is using 2.6.5).
http://stackoverflow.com/questions/2909 ... ts-package

I tried the suggested actions and manually added those recommended libraries (pyOpenSSL, ndg-httpsclient, pyasn1) to 'lib26/site-packages' but so far without success.

My Pushbullet plugin also one day suddenly stopped working. It was in January this year.
I had to quickly find a solution.
I also tried various possibilities, but in the end I found only one solution: I used pycurl instead of requests. You can see how I did it.
I think that the same solution could also help in your case.
Note: pycurl is part of the installation file EventGhost.
However, I obviously can integrate new _ssl.pyd file into the next build.

Pako

[Pako]

Since Pako appears to be MIA at the moment, I've come up with a temporary workaround: Simply drop in the updated win32 _ssl.pyd found here. Hope this helps you as well, Walter.

=> 0.4.1.r1706