Installing pip fails on RHEL 7.4 with SSL error
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
devstack |
Invalid
|
Undecided
|
Jim Rollenhagen |
Bug Description
RHEL 7 curl does not support TLS > 1.0 by default, per this bugzilla: https:/
And it seems bootstrap.pypa.io only supports TLS 1.2: https:/
Passing --tlsv1 to curl here will force curl to speak any TLS 1.x version.
Logs from devstack:
2018-01-03 18:01:49.425 | + tools/install_
2018-01-03 18:01:49.430 | % Total % Received % Xferd Average Speed Time Time Time Current
2018-01-03 18:01:49.430 | Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
2018-01-03 18:01:49.700 | curl: (35) Peer reports incompatible or unsupported protocol version.
and further tests:
$ curl -I -v https:/
* About to connect() to bootstrap.pypa.io port 443 (#0)
* Trying 151.101.44.175...
* Connected to bootstrap.pypa.io (151.101.44.175) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/
CApath: none
* NSS error -12190 (SSL_ERROR_
* Peer reports incompatible or unsupported protocol version.
* Closing connection 0
curl: (35) Peer reports incompatible or unsupported protocol version.
$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.4 (Maipo)
description: | updated |
summary: |
- Installing pip fails on RHEL 7.1 with SSL error + Installing pip fails on RHEL 7.4 with SSL error |
Fix proposed to branch: master /review. openstack. org/530991
Review: https:/