aws / aws/amazon-ssm-agent

Patching error on an Ubuntu 20.04 instance - AttributeError: module 'lib' has no attribute 'X509_V_FLAG_NOTIFY_POLICY'

Open
#586 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
1.2k
Forks
357
PR merge metrics
No merged PRs in 30d

Description

SSM agent version: 3.3.551.0

Snippets from the CloudWatch logs output:

```
Using python binary: 'python3'
Using Python Version: Python 3.8.10

Downloading payload from https://s3.us-east-2.amazonaws.com/aws-ssm-us-east-2/patchbaselineoperations/linux/payloads/patch-baseline-operations-1.139.tar.gz

Attempting to import entrance file os_selector
Error loading entrance module.
Traceback (most recent call last):
File "/var/log/amazon/ssm/patch-baseline-operations/common_startup_entrance.py", line 202, in execute
entrance_module = __import__(module_name)
File "/var/log/amazon/ssm/patch-baseline-operations/os_selector.py", line 11, in
import common_os_selector_methods
File "/var/log/amazon/ssm/patch-baseline-operations/common_os_selector_methods.py", line 12, in
from patch_common.baseline_override import load_baseline_override
File "/var/log/amazon/ssm/patch-baseline-operations/patch_common/baseline_override.py", line 6, in
from patch_common.downloader import download_file, load_json_file, is_access_denied
File "/var/log/amazon/ssm/patch-baseline-operations/patch_common/downloader.py", line 14, in
from patch_common.client_selector import get_default_client
File "/var/log/amazon/ssm/patch-baseline-operations/patch_common/client_selector.py", line 2, in
import boto3
File "/var/log/amazon/ssm/patch-baseline-operations/boto3/__init__.py", line 16, in
from boto3.session import Session
File "/var/log/amazon/ssm/patch-baseline-operations/boto3/session.py", line 17, in
import botocore.session
File "/var/log/amazon/ssm/patch-baseline-operations/botocore/session.py", line 29, in
import botocore.credentials
File "/var/log/amazon/ssm/patch-baseline-operations/botocore/credentials.py", line 34, in
from botocore.config import Config
File "/var/log/amazon/ssm/patch-baseline-operations/botocore/config.py", line 16, in
from botocore.endpoint import DEFAULT_TIMEOUT, MAX_POOL_CONNECTIONS
File "/var/log/amazon/ssm/patch-baseline-operations/botocore/endpoint.py", line 22, in
from botocore.awsrequest import create_request_object
File "/var/log/amazon/ssm/patch-baseline-operations/botocore/awsrequest.py", line 25, in
import botocore.utils
File "/var/log/amazon/ssm/patch-baseline-operations/botocore/utils.py", line 31, in
import botocore.httpsession
File "/var/log/amazon/ssm/patch-baseline-operations/botocore/httpsession.py", line 17, in
from urllib3.contrib.pyopenssl import orig_util_SSLContext as SSLContext
File "/var/log/amazon/ssm/patch-baseline-operations/urllib3/contrib/pyopenssl.py", line 46, in
import OpenSSL.SSL
File "/usr/lib/python3/dist-packages/OpenSSL/__init__.py", line 8, in
from OpenSSL import crypto, SSL
File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 1553, in
class X509StoreFlags(object):
File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 1571, in X509StoreFlags
NOTIFY_POLICY = _lib.X509_V_FLAG_NOTIFY_POLICY

AttributeError: module 'lib' has no attribute 'X509_V_FLAG_NOTIFY_POLICY'
module 'lib' has no attribute 'X509_V_FLAG_NOTIFY_POLICY'
```

Contributor guide

Open the contributing guide

Research direction

Start at common_startup_entrance.py and follow the os_selector.py import chain shown in the traceback. Reproduce the patch operation on Ubuntu 20.04, then inspect the bundled boto3, botocore, urllib3, and system OpenSSL interaction around OpenSSL/crypto.py. Done means the patch baseline operation loads and runs without the X509_V_FLAG_NOTIFY_POLICY AttributeError.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.