Skip to content

/ cpython

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

bpo-35121: prefix dot in domain for proper subdomain validation #10258

Merged
merged 7 commits into from Mar 10, 2019
Merged

bpo-35121: prefix dot in domain for proper subdomain validation #10258

merged 7 commits into from Mar 10, 2019

Conversation

@tirkarthi
Copy link
Member

@tirkarthi tirkarthi commented Oct 31, 2018 •
edited by bedevere-bot

Domain related check is done at

cpython/Lib/http/cookiejar.py

Line 1176 in 0353b4e

if not (req_host.endswith(domain) or erhn.endswith(domain)):
. There is no check to add '.' before domain if absent. Hence it performs a substring match with the values req_host = ".barfoo.com" and erhn = ".barfoo.com" and domain = "foo.com" so the condition not (req_host.endswith(domain) or erhn.endswith(domain)) fails and doesn't return False. I would suggest adding a check to make sure domain also starts with '.' similar to req_host and erhn thus fixing the issue. I tried the fix and existing tests along with the reported case works fine.

This causes domain "foo.com" to be a valid domain for access of "barfoo.com" since "foo.com" matches the subdomain in substring match with endswith method.

https://bugs.python.org/issue35121
@serhiy-storchaka
serhiy-storchaka reviewed Dec 21, 2018
View changes
Lib/http/cookiejar.py Outdated
@@ -1173,6 +1173,8 @@ def domain_return_ok(self, domain, request):
req_host = "."+req_host
if not erhn.startswith("."):
erhn = "."+erhn
if not domain.startswith("."):
domain = "."+domain

This comment has been minimized.

Sign in to view
@serhiy-storchaka

serhiy-storchaka Dec 21, 2018
Member

This will affect calls of self.is_blocked(domain) and self.is_not_allowed(domain) below.

This comment has been minimized.

Sign in to view
@tirkarthi

tirkarthi Dec 21, 2018
Author Member

Thanks @serhiy-storchaka . My bad that I looked into fixing the issue and not about the underlying callers that use the dot-prefixed domain. Yes, adding the extra dot makes the comparison to fail where A has an extra dot at start due to my patch at

cpython/Lib/http/cookiejar.py

Line 601 in f30060d

if not initial_dot and A == B:
.

Sample program where the domain should be blocked

import urllib
from http.cookiejar import DefaultCookiePolicy

policy = DefaultCookiePolicy(blocked_domains=['xxxfoo.co.jp'])
req = urllib.request.Request('https://xxxfoo.co.jp/')
print(policy.domain_return_ok('xxxfoo.co.jp', req))
➜  cpython git:(master) ✗ python3.7 /tmp/bar.py 
False

➜  cpython git:(bpo35121) ✗ ./python.exe /tmp/bar.py  
True

With patch this returns true but should be false since the domain is blocked and the prefix dot makes the comparison .xxxfoo.co.jp == xxxfoo.co.jp . One fix would be to use dot prefixed domain only for the checks at

cpython/Lib/http/cookiejar.py

Line 1178 in f30060d

if not (req_host.endswith(domain) or erhn.endswith(domain)):

I think this needs to be fixed but I am also afraid I might accidentally break something here since the function itself received no changes since 2004.
@tirkarthi
Copy link
Member Author

@tirkarthi tirkarthi commented Dec 21, 2018 •
edited

Looking further into this the domain validation makes it little more stricter and can have wider implications. Example requests library uses cookiejar to maintain cookies between sessions. One more case is that domain can be empty so only non-empty domains can be prefixed with dot

A simple server that sets Cookie with value A=LDJDSFLKSDJLDSF

import SimpleHTTPServer
import logging

class MyHTTPRequestHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):
    def do_GET(self):
        self.cookieHeader = self.headers.get('Cookie')
        SimpleHTTPServer.SimpleHTTPRequestHandler.do_GET(self)

    def end_headers(self):
        self.send_my_headers()
        SimpleHTTPServer.SimpleHTTPRequestHandler.end_headers(self)

    def send_my_headers(self):
        self.send_header('Set-Cookie', 'A=LDJDSFLKSDJLDSF')

if __name__ == '__main__':
    SimpleHTTPServer.test(HandlerClass=MyHTTPRequestHandler)

Add below host entry to /etc/hosts

127.0.0.1 test.com
127.0.0.1 footest.com

import requests

with requests.Session() as s:
    cookies = dict(cookies_are='working')
    m = s.get("http://test.com:8000", cookies=cookies)
    print(m.request.headers)
    m = s.get("http://footest.com:8000", cookies=cookies)
    print(m.request.headers)

Before patch :

{'User-Agent': 'python-requests/2.11.1', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 
'Connection': 'keep-alive', 'Cookie': 'cookies_are=working'}
{'User-Agent': 'python-requests/2.11.1', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 
'Connection': 'keep-alive', 'Cookie': 'A=LDJDSFLKSDJLDSF; cookies_are=working'}

After patch :

{'User-Agent': 'python-requests/2.11.1', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 
'Connection': 'keep-alive', 'Cookie': 'cookies_are=working'}
{'User-Agent': 'python-requests/2.11.1', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 
'Connection': 'keep-alive', 'Cookie': 'cookies_are=working'}

As with my patch since the cookie is set on test.com while making a request to footest.com the cookie is skipped as part of the patch. This is a behavior change to be decided whether worth doing or to document this. In a client with session like requests module connecting to lot of hosts this can potentially pass cookies of test.com to footest.com . A discussion on requests repo on providing the option for user to set a stricter cookie policy : psf/requests#2576

I am adding this to the tracker too.
tirkarthi added 3 commits Oct 31, 2018
@tirkarthi
Prefix domain with dot for proper subdomain validation in domain_retu…
d67d18e 
…rn_ok
@tirkarthi
Add NEWS entry
2816aa8
@tirkarthi
Prefix dot only for suffix check and add test
Loading status checks…
dfdc776
@tirkarthi tirkarthi force-pushed the tirkarthi:bpo35121 branch from f30060d to dfdc776 Dec 24, 2018
@serhiy-storchaka
serhiy-storchaka reviewed Dec 24, 2018
View changes
Lib/test/test_http_cookiejar.py Show resolved Hide resolved
Misc/NEWS.d/next/Library/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst Outdated
@@ -0,0 +1,2 @@
Prefix domain with dot for proper subdomain validation in

This comment has been minimized.

Sign in to view
@serhiy-storchaka

serhiy-storchaka Dec 24, 2018
Member

This describes what the code does, which is an implementation detail. A news entry should describe the change in the user visible behavior.

This comment has been minimized.

Sign in to view
@tirkarthi

tirkarthi Dec 24, 2018
Author Member

Added a note about it but this is also affects when domain_return_ok is present. I couldn't come up with a better wording since I am not a native speaker. Suggestions welcome. This started as a bug fix but since this
turned out to be a security issue is it okay to move this to security section?

Don't send cookies of domain A without Domain attribute to domain B
when domain A is a suffix match of domain B while using a cookiejar
with :meth:`http.cookiejar.DefaultCookiePolicy` policy. Patch by
Karthikeyan Singaravelan.
@ZackerySpytz
ZackerySpytz reviewed Dec 24, 2018
View changes
Lib/http/cookiejar.py Outdated
if not (req_host.endswith(domain) or erhn.endswith(domain)):
if suffix_check_domain and not suffix_check_domain.startswith("."):
suffix_check_domain = "." + suffix_check_domain
if not (req_host.endswith(suffix_check_domain) or erhn.endswith(suffix_check_domain)):

This comment has been minimized.

Sign in to view
@ZackerySpytz

ZackerySpytz Dec 24, 2018
Contributor

New code should conform to PEP 8.

This comment has been minimized.

Sign in to view
@serhiy-storchaka

serhiy-storchaka Dec 24, 2018
Member

Maybe use shorter name, e.g. dotdomain?

This comment has been minimized.

Sign in to view
@tirkarthi

tirkarthi Dec 24, 2018
Author Member

dotdomain sounds good to me. Perhaps restructure the clause as below removing the assignment at the start?

if domain and not domain.startswith("."):
    dotdomain = "." + domain
else:
    dotdomain = domain

This comment has been minimized.

Sign in to view
@serhiy-storchaka

serhiy-storchaka Dec 24, 2018
Member

LGTM.

This comment has been minimized.

Sign in to view
@tirkarthi

tirkarthi Dec 24, 2018
Author Member

Changed the code to use dotdomain as mentioned in #10258 (comment). Thanks.
@tirkarthi
Reword news entry and added extra test
Loading status checks…
ecae447
@serhiy-storchaka serhiy-storchaka requested a review from ned-deily Dec 24, 2018
@serhiy-storchaka
serhiy-storchaka reviewed Dec 24, 2018
View changes
Lib/http/cookiejar.py Outdated
if not (req_host.endswith(domain) or erhn.endswith(domain)):
if suffix_check_domain and not suffix_check_domain.startswith("."):
suffix_check_domain = "." + suffix_check_domain
if not (req_host.endswith(suffix_check_domain) or erhn.endswith(suffix_check_domain)):

This comment has been minimized.

Sign in to view
@serhiy-storchaka

serhiy-storchaka Dec 24, 2018
Member

Maybe use shorter name, e.g. dotdomain?
Misc/NEWS.d/next/Library/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst Outdated
@@ -0,0 +1,4 @@
Don't send cookies of domain A without Domain attribute to domain B
when domain A is a suffix match of domain B while using a cookiejar
with :meth:`http.cookiejar.DefaultCookiePolicy` policy. Patch by

This comment has been minimized.

Sign in to view
@serhiy-storchaka

serhiy-storchaka Dec 24, 2018
Member

:class:

This comment has been minimized.

Sign in to view
@tirkarthi

tirkarthi Dec 24, 2018
Author Member

Fixed. Thanks.
@serhiy-storchaka
Copy link
Member

@serhiy-storchaka serhiy-storchaka commented Dec 24, 2018

LGTM, but the code style and the wording of a news entry may need some polishing.
@tirkarthi
Copy link
Member Author

@tirkarthi tirkarthi commented Dec 24, 2018

This also affects 2.7 as I can see the added tests failing without the fix with the same logic being present. I don't know if it might break anything since 2.7 is there for a long time. I have done a manual backport of this PR in case this is needed for 2.7 and locally tests pass for cookielib. Branch : 2.7...tirkarthi:bpo35121-27
@tirkarthi
Refactor if clause and fix news entry
Loading status checks…
b2ab4a3
@serhiy-storchaka
serhiy-storchaka approved these changes Dec 24, 2018
View changes
@tirkarthi
Copy link
Member Author

@tirkarthi tirkarthi commented Dec 24, 2018

@serhiy-storchaka Is this worth moving news entry into security section instead of library?
@tirkarthi
Copy link
Member Author

@tirkarthi tirkarthi commented Dec 24, 2018

Sorry this turned out to be longer since I think I may have found another issue in return_ok(cookie, domain) which does similar substring check in return_ok_domain thus returning true. So this not only passed cookies of test.com to footest.com but could have potentially passed cookies of 1.test.com to 11.test.com.

I have a fix for return_ok_domain locally similar to domain_return_ok but I don't know if I am making something stricter though these functions don't return correct values currently as they should be. I would also like to know if it's okay to continue the discussion further here and feedback on the analysis. More details as below :

https://docs.python.org/3/library/http.cookiejar.html#http.cookiejar.CookiePolicy.return_ok

CookiePolicy.return_ok(cookie, request)

    Return boolean value indicating whether cookie should be returned to server.
    cookie is a Cookie instance. request is an object implementing the interface defined by the documentation for CookieJar.add_cookie_header().


pol.set_blocked_domains([])
req = urllib.request.Request("http://acme.com/")
res = FakeResponse(headers, "http://acme.com/")
cookies = c.make_cookies(res, req)
c.extract_cookies(res, req)
self.assertEqual(len(c), 1)

print(cookies[0]) # <Cookie CUSTOMER=WILE_E_COYOTE for acme.com/>
req = urllib.request.Request("http://badacme.com/")
self.assertFalse(pol.return_ok(cookies[0], req)) # This fails returning true though cookie is set on acme.com

The function return_ok calls helper functions for different attributes of a cookie like return_ok_path, return_ok_domain, etc. In return_ok_domain similar substring test is done and thus returns true while checking with domain though it should be checking with dotdomain like the proposed fix at

cpython/Lib/http/cookiejar.py

Line 1162 in 44a79cc

if cookie.version == 0 and not ("."+erhn).endswith(domain):

From the docs at https://docs.python.org/3/library/http.cookiejar.html#http.cookiejar.CookiePolicy.domain_return_ok

 CookiePolicy.domain_return_ok(domain, request)

Return false if cookies should not be returned, given cookie domain.

This method is an optimization. It removes the need for checking every cookie 
with a particular domain (which might involve reading many files). Returning true 
from domain_return_ok() and path_return_ok() leaves all the work to return_ok().

domain_return_ok is a check that says if the domain has access to the request object as per the original report this should have returned False which it didn't. Then after the lightweight check each cookie itself is checked for all the attributes with return_ok as a stricter form of check per cookie which should have returned False with return_ok_domain but returned True and thus the cookie for test.com was passed along to footest.com after two layers of checking.

Now that domain_return_ok is fixed the lightweight check being more stricter at

cpython/Lib/http/cookiejar.py

Line 1251 in 44a79cc

if not self._policy.domain_return_ok(domain, request):
the domain level returns an empty list but the underlying stricter check return_ok_domain still has the bug though it's not executed. The fix would be to use dotdomain in return_ok_domain similar to current one. I applied the fix and no tests failed.

One more option is that there are stricter versions of the policy that could be enabled with the flags and hence return_ok_domain would have been stricter but the DefaultCookiePolicy has these flags false by default.
@tirkarthi
Ensure return_ok_domain does proper validation
Loading status checks…
b8e2df1
@tirkarthi
Copy link
Member Author

@tirkarthi tirkarthi commented Dec 25, 2018

Fixed return_ok_domain too with b8e2df1 since it's the underlying problem and is used in the public function return_ok when domain is set. Let me know if it needs to be reverted and raised a separate PR . Thanks.
@vstinner
Copy link
Member

@vstinner vstinner commented Jan 10, 2019

I removed the " needs backport to 3.6" label, the 3.6 branch no long accept bugfixes (only security fixes are accepted): https://devguide.python.org/#status-of-python-branches
@ned-deily
Copy link
Member

@ned-deily ned-deily commented Jan 10, 2019

@vstinner, This is marked as a security fix.
@tirkarthi
Move NEWS to security
Loading status checks…
9d1eed3
@tirkarthi
Copy link
Member Author

@tirkarthi tirkarthi commented Mar 9, 2019

Thanks @serhiy-storchaka . Moved NEWS entry to security.
@alex
alex approved these changes Mar 9, 2019
View changes
@ned-deily ned-deily merged commit ca7fe50 into python:master Mar 10, 2019
5 checks passed
5 checks passed
Azure Pipelines PR #20190309.12 succeeded
Details
bedevere/issue-number Issue number 35121 found
Details
bedevere/news News entry found in Misc/NEWS.d
continuous-integration/appveyor/pr AppVeyor build succeeded
Details
continuous-integration/travis-ci/pr The Travis CI build passed
Details
@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Mar 10, 2019

Thanks @tirkarthi for the PR, and @ned-deily for merging it 🌮🎉.. I'm working now to backport this PR to: 3.6, 3.7.
🐍🍒⛏🤖 I'm not a witch! I'm not a witch!
@bedevere-bot bedevere-bot removed the awaiting merge label Mar 10, 2019
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Mar 10, 2019

GH-12259 is a backport of this pull request to the 3.7 branch.
@bedevere-bot bedevere-bot removed the needs backport to 3.7 label Mar 10, 2019
miss-islington added a commit to miss-islington/cpython that referenced this pull request Mar 10, 2019
@tirkarthi @miss-islington
bpo-35121: prefix dot in domain for proper subdomain validation (pyth…
1da405e 
…onGH-10258)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Mar 10, 2019

GH-12260 is a backport of this pull request to the 3.6 branch.
@bedevere-bot bedevere-bot removed the needs backport to 3.6 label Mar 10, 2019
miss-islington added a commit to miss-islington/cpython that referenced this pull request Mar 10, 2019
@tirkarthi @miss-islington
bpo-35121: prefix dot in domain for proper subdomain validation (pyth…
617bf35 
…onGH-10258)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
@ned-deily ned-deily added the needs backport to 3.7 label Mar 10, 2019
@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Mar 10, 2019

Thanks @tirkarthi for the PR, and @ned-deily for merging it 🌮🎉.. I'm working now to backport this PR to: 3.7.
🐍🍒⛏🤖
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Mar 10, 2019

GH-12261 is a backport of this pull request to the 3.7 branch.
@bedevere-bot bedevere-bot removed the needs backport to 3.7 label Mar 10, 2019
miss-islington added a commit to miss-islington/cpython that referenced this pull request Mar 10, 2019
@tirkarthi @miss-islington
bpo-35121: prefix dot in domain for proper subdomain validation (pyth…
9059263 
…onGH-10258)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
ned-deily added a commit that referenced this pull request Mar 10, 2019
@miss-islington @tirkarthi @ned-deily
bpo-35121: prefix dot in domain for proper subdomain validation (GH-1…
Loading status checks…
e5123d8 
…0258) (GH-12261)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
ned-deily added a commit that referenced this pull request Mar 10, 2019
@miss-islington @tirkarthi @ned-deily
bpo-35121: prefix dot in domain for proper subdomain validation (GH-1…
Loading status checks…
b241af8 
…0258) (GH-12260)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Mar 10, 2019

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot ARMv7 Debian buster 3.6 has failed when building commit b241af8.

What do you need to do:

  1. Don't panic.
  2. Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
  3. Go to the page of the buildbot that failed (https://buildbot.python.org/all/#builders/180/builds/1) and take a look at the build logs.
  4. Check if the failure is related to this commit (b241af8) or if it is a false positive.
  5. If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/all/#builders/180/builds/1

Click to see traceback logs 
Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 104] Connection reset by peer
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 48610)
 server: connection cipher is now ('ECDHE-RSA-AES256-SHA', 'TLSv1.0', 256)
 server: selected protocol is now None
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 59560)

 server:  bad connection attempt from ('127.0.0.1', 59560):
Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 OSError: [Errno 0] Error
 server:  new connection from ('127.0.0.1', 58004)

 server:  bad connection attempt from ('127.0.0.1', 58004):
Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2031, in run
    self.write(msg.lower())
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1949, in write
    return self.sslconn.write(bytes)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 891, in write
    return self._sslobj.write(data)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 642, in write
    return self._sslobj.write(data)
 ConnectionResetError: [Errno 104] Connection reset by peer
k


Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2633, in test_protocol_sslv23
    try_protocol_combo(ssl.PROTOCOL_SSLv23, ssl.PROTOCOL_TLSv1, 'TLSv1')
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2323, in try_protocol_combo
    chatty=False, connectionchatty=False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2248, in server_params_test
    s.connect((HOST, server.port))
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:852)

======================================================================
ERROR: test_protocol_tlsv1_1 (test.test_ssl.ThreadedTests)
Connecting to a TLSv1.1 server with various client options.
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2707, in test_protocol_tlsv1_1
    try_protocol_combo(ssl.PROTOCOL_SSLv23, ssl.PROTOCOL_TLSv1_1, 'TLSv1.1')
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2323, in try_protocol_combo
    chatty=False, connectionchatty=False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2248, in server_params_test
    s.connect((HOST, server.port))
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:852)

----------------------------------------------------------------------

Ran 136 tests in 8.989s

FAILED (errors=2, skipped=7)


Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_httplib.py", line 1605, in test_networked_good_cert
    h.request('GET', '/')
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1239, in request
    self._send_request(method, url, body, headers, encode_chunked)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1285, in _send_request
    self.endheaders(body, encode_chunked=encode_chunked)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1234, in endheaders
    self._send_output(message_body, encode_chunked=encode_chunked)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1026, in _send_output
    self.send(msg)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 964, in send
    self.connect()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1400, in connect
    server_hostname=server_hostname)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

----------------------------------------------------------------------

Ran 103 tests in 1.956s

FAILED (errors=1)


Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_nntplib.py", line 292, in setUpClass
    usenetrc=False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/nntplib.py", line 1077, in __init__
    self.sock = _encrypt_on(self.sock, ssl_context, host)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/nntplib.py", line 292, in _encrypt_on
    return context.wrap_socket(sock, server_hostname=hostname)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:852)

----------------------------------------------------------------------

Ran 89 tests in 10.588s

FAILED (errors=1, skipped=2)


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 104] Connection reset by peer
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 104] Connection reset by peer
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 104] Connection reset by peer
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 49350)
 server: connection cipher is now ('ECDHE-RSA-AES256-SHA', 'TLSv1.0', 256)
 server: selected protocol is now None
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 47036)

 server:  bad connection attempt from ('127.0.0.1', 47036):
Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 OSError: [Errno 0] Error
 server:  new connection from ('127.0.0.1', 35650)

 server:  bad connection attempt from ('127.0.0.1', 35650):
Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:852)
k


Traceback (most recent call last):
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2031, in run
    self.write(msg.lower())
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 1949, in write
    return self.sslconn.write(bytes)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 891, in write
    return self._sslobj.write(data)
   File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 642, in write
    return self._sslobj.write(data)
 ConnectionResetError: [Errno 104] Connection reset by peer
k


Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2633, in test_protocol_sslv23
    try_protocol_combo(ssl.PROTOCOL_SSLv23, ssl.PROTOCOL_TLSv1, 'TLSv1')
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2323, in try_protocol_combo
    chatty=False, connectionchatty=False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2248, in server_params_test
    s.connect((HOST, server.port))
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:852)

======================================================================
ERROR: test_protocol_tlsv1_1 (test.test_ssl.ThreadedTests)
Connecting to a TLSv1.1 server with various client options.
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2707, in test_protocol_tlsv1_1
    try_protocol_combo(ssl.PROTOCOL_SSLv23, ssl.PROTOCOL_TLSv1_1, 'TLSv1.1')
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2323, in try_protocol_combo
    chatty=False, connectionchatty=False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_ssl.py", line 2248, in server_params_test
    s.connect((HOST, server.port))
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:852)

----------------------------------------------------------------------

Ran 136 tests in 4.807s

FAILED (errors=2, skipped=7)
Re-running test 'test_httplib' in verbose mode


Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 320, in _handle_request_noblock
    self.process_request(request, client_address)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 351, in process_request
    self.finish_request(request, client_address)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 364, in finish_request
    self.RequestHandlerClass(request, client_address, self)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 724, in __init__
    self.handle()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/server.py", line 418, in handle
    self.handle_one_request()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/server.py", line 386, in handle_one_request
    self.raw_requestline = self.rfile.readline(65537)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socket.py", line 586, in readinto
    return self._sock.recv_into(b)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1012, in recv_into
    return self.read(nbytes, buffer)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 631, in read
    v = self._sslobj.read(len, buffer)
ConnectionResetError: [Errno 104] Connection reset by peer
----------------------------------------
----------------------------------------
Exception happened during processing of request from ('127.0.0.1', 53960)
Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 320, in _handle_request_noblock
    self.process_request(request, client_address)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 351, in process_request
    self.finish_request(request, client_address)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 364, in finish_request
    self.RequestHandlerClass(request, client_address, self)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socketserver.py", line 724, in __init__
    self.handle()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/server.py", line 418, in handle
    self.handle_one_request()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/server.py", line 386, in handle_one_request
    self.raw_requestline = self.rfile.readline(65537)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/socket.py", line 586, in readinto
    return self._sock.recv_into(b)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1012, in recv_into
    return self.read(nbytes, buffer)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 631, in read
    v = self._sslobj.read(len, buffer)
ConnectionResetError: [Errno 104] Connection reset by peer
----------------------------------------
Got an error:
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)


Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_httplib.py", line 1605, in test_networked_good_cert
    h.request('GET', '/')
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1239, in request
    self._send_request(method, url, body, headers, encode_chunked)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1285, in _send_request
    self.endheaders(body, encode_chunked=encode_chunked)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1234, in endheaders
    self._send_output(message_body, encode_chunked=encode_chunked)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1026, in _send_output
    self.send(msg)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 964, in send
    self.connect()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/http/client.py", line 1400, in connect
    server_hostname=server_hostname)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

----------------------------------------------------------------------

Ran 103 tests in 1.463s

FAILED (errors=1)
Re-running test 'test_nntplib' in verbose mode


Traceback (most recent call last):
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/test/test_nntplib.py", line 292, in setUpClass
    usenetrc=False)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/nntplib.py", line 1077, in __init__
    self.sock = _encrypt_on(self.sock, ssl_context, host)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/nntplib.py", line 292, in _encrypt_on
    return context.wrap_socket(sock, server_hostname=hostname)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/ssd/buildbot/buildarea/3.6.gps-ubuntu-exynos5-armv7l/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:852)

----------------------------------------------------------------------

Ran 89 tests in 10.562s

FAILED (errors=1, skipped=2)
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Mar 10, 2019

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot AMD64 FreeBSD CURRENT Shared 3.6 has failed when building commit b241af8.

What do you need to do:

  1. Don't panic.
  2. Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
  3. Go to the page of the buildbot that failed (https://buildbot.python.org/all/#builders/172/builds/180) and take a look at the build logs.
  4. Check if the failure is related to this commit (b241af8) or if it is a false positive.
  5. If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/all/#builders/172/builds/180

Click to see traceback logs 
Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 61710)
 server: connection cipher is now ('ECDHE-RSA-AES256-SHA', 'TLSv1.0', 256)
 server: selected protocol is now None
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 61728)

 server:  bad connection attempt from ('127.0.0.1', 61728):
Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 OSError: [Errno 0] Error
 server:  new connection from ('127.0.0.1', 61730)

 server:  bad connection attempt from ('127.0.0.1', 61730):
Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 2031, in run
    self.write(msg.lower())
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1949, in write
    return self.sslconn.write(bytes)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 891, in write
    return self._sslobj.write(data)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 642, in write
    return self._sslobj.write(data)
 BrokenPipeError: [Errno 32] Broken pipe
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1700, in test_ciphers
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_connect (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1525, in test_connect
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_connect_cadata (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1642, in test_connect_cadata
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1096, in _real_connect
    socket.connect(self, addr)
ConnectionRefusedError: [Errno 61] Connection refused

======================================================================
ERROR: test_connect_capath (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1621, in test_connect_capath
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_connect_with_context (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1583, in test_connect_with_context
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_get_server_certificate (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1687, in test_get_server_certificate
    _test_get_server_certificate(self, *self.server_addr, cert=SIGNING_CA)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1847, in _test_get_server_certificate
    pem = ssl.get_server_certificate((host, port), ca_certs=cert)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1232, in get_server_certificate
    with context.wrap_socket(sock) as sslsock:
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

----------------------------------------------------------------------

Ran 136 tests in 11.027s

FAILED (errors=6, skipped=8)


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
ERROR


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 62427)
 server: connection cipher is now ('ECDHE-RSA-AES256-SHA', 'TLSv1.0', 256)
 server: selected protocol is now None
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
 server:  new connection from ('127.0.0.1', 62445)

 server:  bad connection attempt from ('127.0.0.1', 62445):
Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 OSError: [Errno 0] Error
 server:  new connection from ('127.0.0.1', 62447)

 server:  bad connection attempt from ('127.0.0.1', 62447):
Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL] called a function you should not call (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1888, in wrap_conn
    self.sock, server_side=True)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 407, in wrap_socket
    _context=self, _session=session)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 817, in __init__
    self.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:852)
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 2031, in run
    self.write(msg.lower())
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1949, in write
    return self.sslconn.write(bytes)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 891, in write
    return self._sslobj.write(data)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 642, in write
    return self._sslobj.write(data)
 BrokenPipeError: [Errno 32] Broken pipe
k


Traceback (most recent call last):
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1966, in run
    msg = self.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1943, in read
    return self.sslconn.read()
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 874, in read
    return self._sslobj.read(len, buffer)
   File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 633, in read
    v = self._sslobj.read(len)
 ConnectionResetError: [Errno 54] Connection reset by peer
k


Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1700, in test_ciphers
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_connect (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1525, in test_connect
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_connect_cadata (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1642, in test_connect_cadata
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_connect_capath (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1621, in test_connect_capath
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_connect_with_context (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1583, in test_connect_with_context
    s.connect(self.server_addr)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1109, in connect
    self._real_connect(addr, False)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1100, in _real_connect
    self.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1077, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 689, in do_handshake
    self._sslobj.do_handshake()
ConnectionResetError: [Errno 54] Connection reset by peer

======================================================================
ERROR: test_get_server_certificate (test.test_ssl.SimpleBackgroundTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1687, in test_get_server_certificate
    _test_get_server_certificate(self, *self.server_addr, cert=SIGNING_CA)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/test/test_ssl.py", line 1847, in _test_get_server_certificate
    pem = ssl.get_server_certificate((host, port), ca_certs=cert)
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/ssl.py", line 1231, in get_server_certificate
    with  create_connection(addr) as sock:
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/socket.py", line 724, in create_connection
    raise err
  File "/usr/home/buildbot/python/3.6.koobs-freebsd-current/build/Lib/socket.py", line 713, in create_connection
    sock.connect(sa)
ConnectionRefusedError: [Errno 61] Connection refused

----------------------------------------------------------------------

Ran 136 tests in 6.174s

FAILED (errors=6, skipped=8)
@tirkarthi
Copy link
Member Author

@tirkarthi tirkarthi commented Mar 10, 2019

The buildbot failures seem to be unrelated to the issue . I can see open issues for test_ssl https://bugs.python.org/issue35925 and https://bugs.python.org/issue35136 .

Thanks much Serhiy, Ned, Alex and Zackery for the review and merge.
tirkarthi added a commit to tirkarthi/cpython that referenced this pull request Mar 11, 2019
@tirkarthi
[3.4] bpo-35121: prefix dot in domain for proper subdomain validation (…
c90a0e3 
…pythonGH-10258)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
tirkarthi added a commit to tirkarthi/cpython that referenced this pull request Mar 11, 2019
@tirkarthi
[3.5] bpo-35121: prefix dot in domain for proper subdomain validation (…
28b0adc 
…pythonGH-10258)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
larryhastings added a commit that referenced this pull request Mar 16, 2019
@tirkarthi @larryhastings
[3.4] bpo-35121: prefix dot in domain for proper subdomain validation (…
Loading status checks…
42ad410 
…GH-10258) (#12279)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
larryhastings added a commit that referenced this pull request Mar 17, 2019
@tirkarthi @larryhastings
[3.5] bpo-35121: prefix dot in domain for proper subdomain validation (…
Loading status checks…
4749f1b 
…GH-10258) (#12281)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe50)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
ma8ma added a commit to ma8ma/cpython that referenced this pull request Apr 7, 2019
@tirkarthi @ma8ma
bpo-35121: prefix dot in domain for proper subdomain validation (pyth…
b72c549 
…onGH-10258)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
arnolddumas added a commit to arnolddumas/cpython that referenced this pull request May 3, 2019
@tirkarthi @arnolddumas
bpo-35121: prefix dot in domain for proper subdomain validation (pyth…
bb9ed31 
…onGH-10258)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
miss-islington added a commit that referenced this pull request Jun 15, 2019
@tirkarthi @miss-islington
[2.7] bpo-35121: prefix dot in domain for proper subdomain validation (…
Loading status checks…
979daae 
…GH-10258) (GH-13426)

This is a manual backport of ca7fe50 since 2.7 has `http.cookiejar` in `cookielib`


https://bugs.python.org/issue35121
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ned-deily ned-deily

@ZackerySpytz ZackerySpytz

@alex alex

@serhiy-storchaka serhiy-storchaka

Assignees
No one assigned
Labels
CLA signed type-security
Projects
None yet
Milestone
No milestone
Linked issues

Successfully merging this pull request may close these issues.

None yet

9 participants
@tirkarthi @serhiy-storchaka @vstinner @ned-deily @miss-islington @bedevere-bot @alex @ZackerySpytz @the-knights-who-say-ni