ssl.PROTOCOL_SSLv3 no longer available in moder pythons

[Clark Boylan]

SSLv3 is no longer considered secure. In response to this modern ssl libs and transitively python itself have removed support for SSLv3 entirely (see https://bugs.python.org/issue22935).

On Ubuntu Xenial this leads to the poppy unittests failing with tracebacks like:

======================================================================
ERROR: Failure: ImportError (cannot import name analytics)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/jenkins/openstack/poppy/.tox/py27/local/lib/python2.7/site-packages/nose/loader.py", line 418, in loadTestsFromName
    addr.filename, addr.module)
  File "/home/jenkins/openstack/poppy/.tox/py27/local/lib/python2.7/site-packages/nose/importer.py", line 47, in importFromPath
    return self.importFromDir(dir_path, fqname)
  File "/home/jenkins/openstack/poppy/.tox/py27/local/lib/python2.7/site-packages/nose/importer.py", line 94, in importFromDir
    mod = load_module(part_fqname, fh, filename, desc)
  File "/home/jenkins/openstack/poppy/tests/functional/transport/pecan/hooks/test_context.py", line 18, in <module>
    from poppy.manager.default import home
  File "/home/jenkins/openstack/poppy/poppy/manager/default/__init__.py", line 18, in <module>
    from poppy.manager.default import driver
  File "/home/jenkins/openstack/poppy/poppy/manager/default/driver.py", line 20, in <module>
    from poppy.manager.default import controllers
  File "/home/jenkins/openstack/poppy/poppy/manager/default/controllers.py", line 16, in <module>
    from poppy.manager.default import analytics
ImportError: cannot import name analytics

Which is caused by:

>>> from poppy.manager.default import analytics
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "poppy/manager/default/__init__.py", line 18, in <module>
    from poppy.manager.default import driver
  File "poppy/manager/default/driver.py", line 20, in <module>
    from poppy.manager.default import controllers
  File "poppy/manager/default/controllers.py", line 17, in <module>
    from poppy.manager.default import background_job
  File "poppy/manager/default/background_job.py", line 22, in <module>
    from poppy.provider.akamai.background_jobs.check_cert_status_and_update \
  File "poppy/provider/akamai/__init__.py", line 16, in <module>
    from poppy.provider.akamai import driver
  File "poppy/provider/akamai/driver.py", line 27, in <module>
    from poppy.provider.akamai import controllers
  File "poppy/provider/akamai/controllers.py", line 25, in <module>
    from poppy.provider.akamai import certificates
  File "poppy/provider/akamai/certificates.py", line 22, in <module>
    from poppy.provider.akamai import utils
  File "poppy/provider/akamai/utils.py", line 36, in <module>
    ssl.PROTOCOL_SSLv3,
AttributeError: 'module' object has no attribute 'PROTOCOL_SSLv3'

This is important for two reasons. The first is openstack's infra team is going to be migrating the default test platform to Ubuntu Xenial in the near future but also SSLv3 isn't secure and you should consider not supporting it at all.

Please either handle SSLv3 not existing or remove support for it entirely.