crossbario / crossbario/autobahn-python

Docs: setup HW entropy for TLS

Open
#1,086 9 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

docs
Dominant language
Python
Stars
2.5k
Forks
768
PR merge metrics
No merged PRs in 30d

Description

Sometimes at boot time happens this error in connection to crossbar (wss://). But after boot if I try to restart my service, it works fine.

Autobahn v18.10.1
Python 3.5.3

2018-11-22 16:10:41.398 474 INFO autobahn.asyncio.component.Component [-] connecting once using transport type "websocket" over endpoint "tcp"
2018-11-22 16:10:41.408 474 ERROR asyncio [-] Fatal error on SSL transport
protocol: <asyncio.sslproto.SSLProtocol object at 0x755234f0>
transport: <_SelectorSocketTransport closing fd=8 read=idle write=<idle, bufsize=0>>: ssl.SSLError: getrandom() initialization failed. (_ssl.c:720)
2018-11-22 16:10:41.408 474 ERROR asyncio Traceback (most recent call last):
2018-11-22 16:10:41.408 474 ERROR asyncio   File "/usr/lib/python3.5/asyncio/sslproto.py", line 635, in _process_write_backlog
2018-11-22 16:10:41.408 474 ERROR asyncio     self._on_handshake_complete)
2018-11-22 16:10:41.408 474 ERROR asyncio   File "/usr/lib/python3.5/asyncio/sslproto.py", line 135, in do_handshake
2018-11-22 16:10:41.408 474 ERROR asyncio     ssldata, appdata = self.feed_ssldata(b'', only_handshake=True)
2018-11-22 16:10:41.408 474 ERROR asyncio   File "/usr/lib/python3.5/asyncio/sslproto.py", line 201, in feed_ssldata
2018-11-22 16:10:41.408 474 ERROR asyncio     self._sslobj.do_handshake()
2018-11-22 16:10:41.408 474 ERROR asyncio   File "/usr/lib/python3.5/ssl.py", line 641, in do_handshake
2018-11-22 16:10:41.408 474 ERROR asyncio     self._sslobj.do_handshake()
2018-11-22 16:10:41.408 474 ERROR asyncio ssl.SSLError: getrandom() initialization failed. (_ssl.c:720)
2018-11-22 16:10:41.408 474 ERROR asyncio
2018-11-22 16:10:41.418 474 INFO autobahn.asyncio.component.Component [-] Connection failed: SSLError: getrandom() initialization failed. (_ssl.c:720)

Any suggestion?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no file or test. Start from the reported Python 3.5 SSL/TLS error during boot and determine the hardware-entropy setup guidance needed; done means documenting a clear setup that prevents the getrandom() initialization failure.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
documentation, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.