Page 1 of 1

[SOLVED] SHA256 has arrived; OpenSSL update needed

Posted: Fri Jul 24, 2015 10:05 pm
by blackwind
In the past few days, Google has apparently started enforcing SHA256 over TLS, so I now get the following error when trying to authenticate:

Code: Select all

SSLHandshakeError: [Errno 1] _ssl.c:480: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm
According to this page, OpenSSL v0.9.8o (or higher) is needed to connect to sites that require SHA256. Could you spin up a new build for me ASAP with the latest OpenSSL, Pako? As is, my configuration is largely crippled.

Re: SHA256 has arrived; OpenSSL update needed

Posted: Sat Jul 25, 2015 6:12 am
by krambriw
I think I stumbled into the same type of problem earlier...

For 'long' time (since 1.5 years) I had a perfectly working plugin using the 'requests' library that suddenly did not work any longer when logging on to the same web site. It generated "SSL InsecurePlatform error when using Requests package". On Stackoverflow I found several postings about this issue that seemed to be related to what Python version you are using. Affected is versions earlier than 2.7.9 (EG is using 2.6.5).
http://stackoverflow.com/questions/2909 ... ts-package

I tried the suggested actions and manually added those recommended libraries (pyOpenSSL, ndg-httpsclient, pyasn1) to 'lib26/site-packages' but so far without success

My solution was at the end not that bad: I divided the plugin functionality into two parts, moved the part using 'requests' to a Raspberry Pi where I run a python script using python3. Basically the same code worked without problems after adopting some python3 modifications. Communication between the two parts happens via MQTT.

Would of course be great to get it work in EG again.

Re: SHA256 has arrived; OpenSSL update needed

Posted: Tue Aug 04, 2015 12:57 am
by blackwind
Since Pako appears to be MIA at the moment, I've come up with a temporary workaround: Simply drop in the updated win32 _ssl.pyd found here. Hope this helps you as well, Walter.

Re: SHA256 has arrived; OpenSSL update needed

Posted: Tue Aug 04, 2015 6:33 am
by krambriw
Thanks for this hint, this needs to be checked, hopefully my old plug starts working again
(Pako is on vacation and will be back later this autumn)

Re: SHA256 has arrived; OpenSSL update needed

Posted: Mon Sep 21, 2015 3:12 pm
by Pako
Dear Walter !
krambriw wrote:I think I stumbled into the same type of problem earlier...
For 'long' time (since 1.5 years) I had a perfectly working plugin using the 'requests' library that suddenly did not work any longer when logging on to the same web site. It generated "SSL InsecurePlatform error when using Requests package". On Stackoverflow I found several postings about this issue that seemed to be related to what Python version you are using. Affected is versions earlier than 2.7.9 (EG is using 2.6.5).
http://stackoverflow.com/questions/2909 ... ts-package

I tried the suggested actions and manually added those recommended libraries (pyOpenSSL, ndg-httpsclient, pyasn1) to 'lib26/site-packages' but so far without success.
My Pushbullet plugin also one day suddenly stopped working. It was in January this year.
I had to quickly find a solution.
I also tried various possibilities, but in the end I found only one solution: I used pycurl instead of requests. You can see how I did it.
I think that the same solution could also help in your case.
Note: pycurl is part of the installation file EventGhost.
However, I obviously can integrate new _ssl.pyd file into the next build.

Pako

Re: SHA256 has arrived; OpenSSL update needed

Posted: Sat Oct 03, 2015 12:12 pm
by Pako
blackwind wrote:Since Pako appears to be MIA at the moment, I've come up with a temporary workaround: Simply drop in the updated win32 _ssl.pyd found here. Hope this helps you as well, Walter.
=> 0.4.1.r1706