openlp-core team mailing list archive

[matysek <1450596@xxxxxxxxxxxxxxxxxx>]

Is this issue about that Apple removed in osx 10.10 some 1024-bit root
certificates and this cause verification failure?

Could it work to fix this by bundlig own copy of root certificate and
use it for ssl verification when connectiong to songselect from osx?

* use method ssl.SSLContext.load_verify_locations
* Later use python 3.4.4 or openssl  when it is released?

-- 
You received this bug notification because you are a member of OpenLP
Core, which is subscribed to OpenLP.
https://bugs.launchpad.net/bugs/1450596

Title:
  Failure to verify SSL cert in SongSelect importer

Status in OpenLP:
  Confirmed

Bug description:
  Reported in Support: http://support.openlp.org/scp/tickets.php?id=2798

  *OpenLP Bug Report*
  Version: {'full': '2.1.4', 'version': '2.1.4', 'build': None}

  --- Details of the Exception. ---

  Tried to log into SongSelect.
  Entered username and password.
  Clicked login.

  --- Exception Traceback ---
  Traceback (most recent call last):
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/urllib/request.py", line 1182, in do_open
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/http/client.py", line 1088, in request
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/http/client.py", line 1126, in _send_request
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/http/client.py", line 1084, in endheaders
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/http/client.py", line 922, in _send_output
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/http/client.py", line 857, in send
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/http/client.py", line 1231, in connect
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/ssl.py", line 365, in wrap_socket
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/ssl.py", line 583, in __init__
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/ssl.py", line 810, in do_handshake
  ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:600)

  During handling of the above exception, another exception occurred:

  Traceback (most recent call last):
    File "/Users/raoul/Projects/OpenLP/OpenLP-2.1.4/openlp/plugins/songs/forms/songselectform.py", line 255, in on_login_button_clicked
    File "/Users/raoul/Projects/OpenLP/OpenLP-2.1.4/openlp/plugins/songs/lib/songselect.py", line 75, in login
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/urllib/request.py", line 463, in open
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/urllib/request.py", line 481, in _open
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/urllib/request.py", line 441, in _call_chain
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/urllib/request.py", line 1225, in https_open
    File "/opt/local/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/urllib/request.py", line 1184, in do_open
  urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:600)>

  --- System information ---
  Platform: Darwin-14.3.0-x86_64-i386-64bit

  --- Library Versions ---
  Python: 3.4.3
  Qt4: 4.8.6
  Phonon: -
  PyQt4: 4.11.3
  QtWebkit: 534.34
  SQLAlchemy: 0.9.9
  SQLAlchemy Migrate: -
  BeautifulSoup: 4.3.2
  lxml: 3.4.1
  Chardet: 2.3.0
  PyEnchant: -
  Mako: 1.0.1
  pyICU: -
  pyUNO bridge: -
  VLC: 2.1.5 Rincewind

To manage notifications about this bug go to:
https://bugs.launchpad.net/openlp/+bug/1450596/+subscriptions