[Bug 1644153] Re: SSL handshake fails on xenial, yakkety, zesty
Steve Langasek
steve.langasek at canonical.com
Thu Dec 1 04:23:55 UTC 2016
Hello Chris, or anyone else affected,
Accepted python-jujuclient into xenial-proposed. The package will build
now and be available at https://launchpad.net/ubuntu/+source/python-
jujuclient/0.50.5-0ubuntu2~16.04 in a few hours, and then in the
-proposed repository.
Please help us by testing this new package. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.Your feedback will aid us getting this
update out to other Ubuntu users.
If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed. In either case, details of your testing will help
us make a better decision.
Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in
advance!
** Tags added: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1644153
Title:
SSL handshake fails on xenial, yakkety, zesty
Status in python-jujuclient:
New
Status in python-jujuclient package in Ubuntu:
Fix Released
Status in python-jujuclient source package in Xenial:
Fix Committed
Status in python-jujuclient source package in Yakkety:
Fix Committed
Status in python-jujuclient source package in Zesty:
Fix Released
Bug description:
[Impact]
* The python Juju client cannot make SSL connections to the server anymore, because TLS v1.0 was deprecated on the server.
* Switching to TLS v1.2 fixes the problem entirely.
* Example failure: http://pastebin.ubuntu.com/23521446/
[Test case]
Steps to reproduce (works in a container, needs a valid juju
environment):
* Install juju 1.25: sudo apt-get install juju-1-default juju-1.25
* Install the package: sudo apt-get install python-jujuclient
* Set up an environment (ec2 works for instance)
* Bootstrap environment: "juju bootstrap # Note your environment's name"
* Run: python -c 'from jujuclient import Environment; Environment.connect("<your environment's name>")'
[Regression Potential]
* None - the package is completely unusable in its current state
because of server changes. It can't get any worse :)
[Other Info]
* The attached patch is the minimal fix - forcing Python to connect over TLS 1.2 instead of forcing TLS 1.0.
* TLS 1.2 connectivity is available in all targeted releases.
* lp:python-jujuclient (upstream) is not affected by the problem, but the code is much diverged from the version in the archives, with way too many changes for a SRU.
To manage notifications about this bug go to:
https://bugs.launchpad.net/python-jujuclient/+bug/1644153/+subscriptions
More information about the Ubuntu-sponsors
mailing list