plague ssh error

[Michael Schwendt]

On Mon, 10 Dec 2007 16:15:33 -0600, Dennis Gilmore wrote:

> On Monday 10 December 2007, Patrice Dumas wrote:
> > Hello,
> >
> > I am on devel, I get a traceback with plagu, for make build and
> > plague-client list.
> >
> >   File "/usr/lib/python2.5/site-packages/plague/SSLConnection.py", line
> > 110, in
> > sendall
> >     sent = con.send(data, flags)
> > OpenSSL.SSL.Error: [('SSL routines', 'SSL3_READ_BYTES', 'sslv3 alert
> > handshake f
> > ailure'), ('SSL routines', 'SSL3_WRITE_BYTES', 'ssl handshake failure')]
> > make: *** [plague] Erreur 1
> >
> >
> > I have rerun fedora-packager-setup.sh
> >
> > Hum, in fact I cannot login in koji either. Maybe it is related.
> >
> > Is it only me? Who should I contact in that case?
> 
> your user cert has expired i need to add a check to fedora-packager-setup.sh  
> that checks and lets you know

It's reproducible with rawhide after managing to update to the latest
openssl and its bumped soname.

The smell of an OpenSSL client/server incompatibility is in the air
(buildsys runs 0.8.7a, rawhide is at 0.9.8g).

Plague server throws the following during the handshake:


Traceback (most recent call last):
  File "/usr/lib64/python2.3/SocketServer.py", line 463, in process_request_thread
    self.finish_request(request, client_address)
  File "/usr/lib64/python2.3/SocketServer.py", line 254, in finish_request
    self.RequestHandlerClass(request, client_address, self)
  File "/usr/lib64/python2.3/SocketServer.py", line 521, in __init__
    self.handle()
  File "/usr/lib64/python2.3/BaseHTTPServer.py", line 324, in handle
    self.handle_one_request()
  File "/usr/lib64/python2.3/BaseHTTPServer.py", line 307, in handle_one_request
    self.raw_requestline = self.rfile.readline()
  File "/usr/lib64/python2.3/socket.py", line 338, in readline
    data = self._sock.recv(self._rbufsize)
  File "/usr/lib/python2.3/site-packages/plague/SSLConnection.py", line 142, in recv
    return con.recv(bufsize, flags)
Error: [('SSL routines', 'SSL3_GET_CLIENT_HELLO', 'length mismatch')]