kragniz / kragniz/python-etcd3

HTTPS connection fails with SSL ERROR: BAD_ECC_CERT

Open
#792 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
450
Forks
194
PR merge metrics
No merged PRs in 30d

Description

There is apparently a bug with the **openssl** library or configuration here in this python module, such that connections with HTTPS to **etcd v3 server** fail with an error like this.

`E0607 12:43:00.193069658 11623 ssl_transport_security.cc:1238] Handshake failed with fatal error SSL_ERROR_SSL: error:1000006b:SSL routines:OPENSSL_internal:BAD_ECC_CERT.`

This is reported as [GRPC Issue 6722](https://github.com/grpc/grpc/issues/6722). The workaround is to generate different x509 certs with the downgraded "P-Curve" algorithm of P-256 instead of P-384. Instead, it would be awesome to get this bug fixed here so the workaround is not required.

P.S. My local openssl installation appears current. If that has anything to do with this, I'm all ears.

Contributor guide

Open the contributing guide

Research direction

Start by reproducing an HTTPS connection from this Python module to an etcd v3 server using the reported P-384 certificate and compare it with the P-256 workaround. Read the linked gRPC issue and inspect the module's OpenSSL or connection configuration. Done means the P-384 certificate connects successfully without requiring downgraded certificates.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
backend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.