Comment 24 for bug 965371

I don't know who decides this kind of thing but I believe that, if a
definitive fix doesn't get done, this version of the package should not go
into the final version of Ubuntu, as it will break too many things that
simply work on Oneiric. Or, if released, it should force all connections to
be TLS1 at least for a while.

Again, I don't know who decides this and using which standards, but LTS is
about stability, and not knowing if a connection will work or not is not
what I would call stable.

Em 20 de abril de 2012 10:09, André Lopes <email address hidden>escreveu:

> Yesterday, the same happened on Emesene
> https://github.com/emesene/emesene/issues/1184:
>
> [02:02:16 ERROR e3.common.Collections] [Errno socket error] [Errno 8]
> ssl.c:504: EOF occurred in violation of protocol
> Traceback (most recent call last):
> File "/home/andre/emesene/emesene/e3/common/Collections.py", line 181, in
> fetch_metadata
> rq = self.github.get_raw(self.theme, current_ext.files[path])
> File "/home/andre/emesene/emesene/e3/common/Github.py", line 42, in
> get_raw
> response = urlopen(API_GITHUB_GETRAW % (self._org, repo, sha))
> File "/usr/lib/python2.7/urllib.py", line 86, in urlopen
> return opener.open(url)
> File "/usr/lib/python2.7/urllib.py", line 207, in open
> return getattr(self, name)(url)
> File "/usr/lib/python2.7/urllib.py", line 436, in open_https
> h.endheaders(data)
> File "/usr/lib/python2.7/httplib.py", line 954, in endheaders
> self._send_output(message_body)
> File "/usr/lib/python2.7/httplib.py", line 814, in _send_output
> self.send(msg)
> File "/usr/lib/python2.7/httplib.py", line 776, in send
> self.connect()
> File "/usr/lib/python2.7/httplib.py", line 1161, in connect
> self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file)
> File "/usr/lib/python2.7/ssl.py", line 381, in wrap_socket
> ciphers=ciphers)
> File "/usr/lib/python2.7/ssl.py", line 143, in __init_
> self.do_handshake()
> File "/usr/lib/python2.7/ssl.py", line 305, in do_handshake
> self._sslobj.do_handshake()
> IOError: [Errno socket error] [Errno 8] _ssl.c:504: EOF occurred in
> violation of protocol
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/965371
>
> Title:
> HTTPS requests fail on some sites on Ubuntu 12.04
>
> Status in OpenSSL cryptography and SSL/TLS toolkit:
> Confirmed
> Status in “openssl” package in Ubuntu:
> Triaged
> Status in “openssl” source package in Precise:
> Triaged
> Status in “openssl” package in Debian:
> New
>
> Bug description:
> This week, HTTPS connections from a Python script I wrote started
> giving me this error:
>
> urllib2.URLError: <urlopen error [Errno 8] _ssl.c:497: EOF occurred in
> violation of protocol>
>
> This used to work up until some three days ago and still works on
> other Ubuntu versions, but not in other Python versions on Precise. I
> was suspecting this was a bug in Python, but a guy on AskUbuntu (
> http://askubuntu.com/questions/116020/python-https-requests-urllib2
> -to-some-sites-fail-on-ubuntu-12-04-without-proxy/116059#116059 )
> found out this happens using the openssl command line tool too:
>
> $ openssl s_client -connect www.mediafire.com:443
>
> But succeeds if forcing TLS 1 with the -tls1 argument.
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/openssl/+bug/965371/+subscriptions
>

--
Pablo Almeida
http://www.google.com/profiles/pabloalmeidaff9