Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-3175

SSL support in Python client libraries

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.8
    • 0.24
    • C++ Tools, Python Client
    • None
    • Windows XP, Python 2.7.1, (broker Red Hat MRG 1.3 on RHEL 5.5)

    Description

      I was trying to connect to my broker with SSL encrypted connection (both PLAIN and EXTERNAL authentication methods). However, it seems to be not working. I get following error messages:

      Traceback (most recent call last):
      File "ssl-external.py", line 20, in <module>
      connection.open()
      File "<string>", line 6, in open
      File "c:\opt!_EUREX14\tests\qpid.python-0.8\python\qpid\messaging\endpoints.py", line 244, in open
      self.attach()
      File "<string>", line 6, in attach
      File "c:\opt!_EUREX14\tests\qpid.python-0.8\python\qpid\messaging\endpoints.py", line 262, in attach
      self._ewait(lambda: self._transport_connected and not self._unlinked())
      File "c:\opt!_EUREX14\tests\qpid.python-0.8\python\qpid\messaging\endpoints.py", line 197, in _ewait
      self.check_error()
      File "c:\opt!_EUREX14\tests\qpid.python-0.8\python\qpid\messaging\endpoints.py", line 190, in check_error
      raise self.error
      qpid.messaging.exceptions.ConnectError: [Errno 1] _ssl.c:499: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate

      In the source codes (messaging/transports.py), the SSL seems to be supported and implemented, but it is not working. I didn't found any possibilities how to pass the certificates to the SSL libraries and the wrap_socket call in transports.py is calling the wrap_socket without any additional attributes except the original socket.

      I didn't had the chance to test other platforms or Python versions, except Python 2.4.3 on RHEL 5.5, where the SSL is not supported at all (the SSL support in Python changed significantly with 2.6)

      Attachments

        1. QPID-3175.patch
          3 kB
          Jakub Scholz
        2. QPID-3175a.patch
          3 kB
          Jakub Scholz
        3. sasl_external.patch
          1 kB
          Jakub Scholz

        Issue Links

          Activity

            People

              kgiusti Ken Giusti
              scholzj Jakub Scholz
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: