ssl.PROTOCOL_SSLv3 no longer available in moder pythons
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Poppy |
New
|
Undecided
|
Unassigned |
Bug Description
SSLv3 is no longer considered secure. In response to this modern ssl libs and transitively python itself have removed support for SSLv3 entirely (see https:/
On Ubuntu Xenial this leads to the poppy unittests failing with tracebacks like:
=======
ERROR: Failure: ImportError (cannot import name analytics)
-------
Traceback (most recent call last):
File "/home/
addr.filename, addr.module)
File "/home/
return self.importFrom
File "/home/
mod = load_module(
File "/home/
from poppy.manager.
File "/home/
from poppy.manager.
File "/home/
from poppy.manager.
File "/home/
from poppy.manager.
ImportError: cannot import name analytics
Which is caused by:
>>> from poppy.manager.
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "poppy/
from poppy.manager.
File "poppy/
from poppy.manager.
File "poppy/
from poppy.manager.
File "poppy/
from poppy.provider.
File "poppy/
from poppy.provider.
File "poppy/
from poppy.provider.
File "poppy/
from poppy.provider.
File "poppy/
from poppy.provider.
File "poppy/
ssl.
AttributeError: 'module' object has no attribute 'PROTOCOL_SSLv3'
This is important for two reasons. The first is openstack's infra team is going to be migrating the default test platform to Ubuntu Xenial in the near future but also SSLv3 isn't secure and you should consider not supporting it at all.
Please either handle SSLv3 not existing or remove support for it entirely.