Avoid SSLv3 handshake error while using urlopen() about recipe-robot HOT 7 CLOSED

I think the options are:
1.) Use PyObjC/NSURLConnection (look at Gurl.py in Munki). Benefits: Can do modern TLS stuff. Downsides: Forces us to use System Python. Lots of PyObjC!
2.) Shell out to curl. Allegedly curl can handle this stuff. Benefits: We know it works. Downsides: Cheesy.
3.) Add requests as a dependency (can be bundled with recipe robot due to license). Benefits: I have experience with this method. Downsides: See "Benefits".
4.) Quit dicking around and use python3.

from recipe-robot.

@eahrold Do you have an opinion? All the options seem equally good/bad.

from recipe-robot.

Not on this one. But I like the acronym QDAUP3

from recipe-robot.

I'm fairly certain there is a way to suppress this using pure python using the built in mac libraries. I think @hansen-m has done this for other autopkg related python scripts.

Might be related:

• http://stackoverflow.com/questions/19477214/urllib3-on-python-2-7-sni-error-on-google-app-engine/19477363#19477363
• http://stackoverflow.com/questions/26640628/sslv3-alert-handshake-failure

Now that I look into this more, it sounds like it is related to newer OpenSSL issues, with the server rejecting the client for not offering a supported encryption option, which isn't what I was thinking of originally.

from recipe-robot.

Yeah, this issue is becoming more common. I don't know the exact details here, but can you workaround it with this monkey-patch...

autopkg/recipes#100

from recipe-robot.

Is anybody still having this issue recently? The example given now works fine for me:

recipe-robot -v http://www.macroplant.com/latest-binaries/adapter-mac.dmg

The fix is probably the result of a change on macroplant.com, but could also be related to the fact that I'm testing on a newer version of macOS than I was back in 2015.

If the issue is rare or gone, I'll close this issue.

from recipe-robot.

If this issue wasn't already resolved in 2019, it should have been resolved when Recipe Robot switched from urllib to curl in 2.0.0.

from recipe-robot.