Uploaded image for project: 'Thrift'
  1. Thrift
  2. THRIFT-2466

Improper error handling for SSL/TLS connections that don't complete a handshake

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.9.1
    • 0.9.2
    • Python - Library
    • None
    • Patch Available

    Description

      The code in TSSLServerSocket.accept() silently drops all SSLError and returns None instead, but none of the TServer implementations handle this case properly, which cause them to pass None around a bunch, which eventually cause weird AttributeError exceptions.

      This bug is easy to reproduce: just open a socket to a Python Thrift server that uses SSL/TLS and close the connection right away.

      Attachments

        Issue Links

          Activity

            People

              roger Roger Meier
              tsuna Benoit Sigoure
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: