You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@thrift.apache.org by "Aki Sukegawa (JIRA)" <ji...@apache.org> on 2017/03/19 01:30:42 UTC

[jira] [Comment Edited] (THRIFT-4026) TSSLSocket doesn't work with Python < 2.7.9

    [ https://issues.apache.org/jira/browse/THRIFT-4026?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15931518#comment-15931518 ] 

Aki Sukegawa edited comment on THRIFT-4026 at 3/19/17 1:29 AM:
---------------------------------------------------------------

[~jbapple] are you verifying client certificates on server side ?
In that case, it is more of a problem of the error message and documentation.
On older versions of Python, you "Need ipaddress and backports.ssl_match_hostname module to verify client certificate."
IOW you need to install the two packages, e.g., using PIP.


was (Author: nsuke):
[~jbapple] are you verifying client certificates on server side ?
In that case, it is more of a problem of the error message and documentation.
You "Need ipaddress and backports.ssl_match_hostname module to verify client certificate."
IOW you need to install the two packages, e.g., using PIP.

> TSSLSocket doesn't work with Python < 2.7.9
> -------------------------------------------
>
>                 Key: THRIFT-4026
>                 URL: https://issues.apache.org/jira/browse/THRIFT-4026
>             Project: Thrift
>          Issue Type: Bug
>          Components: Python - Library
>    Affects Versions: 0.10.0
>         Environment: Python 2.7.5
>            Reporter: Benoit Sigoure
>            Assignee: Aki Sukegawa
>             Fix For: 0.11.0
>
>
> As a result of a change made in THRIFT-3917, {{TSSLSocket}} now fails with a {{TypeError}} in {{open()}}:
> {code}
>   File "/bld/thrift/Artools-rpmbuild/thrift-0.10.0/lib/py/build/lib.linux-i686-2.7/thrift/transport/TSSLSocket.py", line 293, in open
>     self._validate_callback(self.peercert, self._server_hostname)
> TypeError: legacy_validate_callback() takes exactly 3 arguments (2 given)
> {code}
> Indeed, {{legacy_validate_callback()}} takes an extra {{self}} argument, which cannot possibly be compatible with the signature of [{{ssl.match_hostname()}}|https://docs.python.org/3/library/ssl.html#ssl.match_hostname] (which was added in Python 3.2).



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)