Comments (3)
@resistorsoftware When you say "level", do you mean "ssl version"? If so then please take a look at https://www.rubydoc.info/gems/mechanize/2.5/Mechanize#ssl_version-instance_method
from mechanize.
Ah sorry! The exact terminology in play is this:
The default Ubuntu 20.04 openssl configuration now sets a minimum TLS protocol version of v1.2. This means that TLS v1.0 and v1.1 are no longer supported by clients using OpenSSL to make outbound requests. This may manifest in the form of OpenSSL “no protocols available” errors if clients hardcode older protocol versions, or if servers do not support TLS v1.2 or higher. For apps using Python, an “[SSL] internal error” error may be shown instead of the “no protocols available” error.
In addition, the default OpenSSL security level (SECLEVEL), was changed from level 1 to level 2. This prevents OpenSSL from using insecure ciphers/keys and may result in “sslv3 alert handshake failure”, “wrong signature type” or “dh key too small” errors when connecting to servers that are running outdated/buggy software, or that have insecure configurations.
So I am curious if I can tell operate the latest greatest Mechanize with a workaround suitable for this where due to SECLEVEL being 2, I get the dh key too small error.
from mechanize.
OK, thanks for explaining. Mechanize uses net-http-persistent to manage its network connections, so my recommendation is to start there. If Net::HTTP::Persistent supports it, then we can introduce a flag to Mechanize to support it.
Side note: I don't see a feature like this in net-http-persistent. I don't even see it in Net::HTTP. Since these libraries are wrapping openssl it may be worth your while to determine if there's something environmental you can do.
Some quick googling indicates you may be able to do this by modifying your openssl config file: https://askubuntu.com/questions/1233186/ubuntu-20-04-how-to-set-lower-ssl-security-level but obviously I've got no experience with any of this.
I'm going to close this, since I don't think there's anything we can do in Mechanize right now, but if you have more questions please ask!
from mechanize.
Related Issues (20)
- Hack to fix the "unsafe legacy renegotiation disabled" error
- Error 403 on heroku HOT 1
- wikipedia_links_to_philosophy.rb currently broken HOT 3
- Trouble when having so much li tags? HOT 1
- libxml2 2.11.x emitting error "FATAL: input conversion failed due to input error" on encoding errors HOT 2
- Per instance OpenSSL params set
- Mechanize doesn't raise Mechanize::ResponseCodeError if error happened before getting the response HOT 3
- Vite Dev server crachses due to a circular reference in a symlink
- explore: mechanize failures when running with libxml2 head HOT 2
- Feature request: print a warning if you call `Form#submit` without specifying a `button` if there are multiple HOT 3
- `Mechanize::File` overrides the `File` base class HOT 3
- 403 error on scrapper but website is accessible on browser
- Add nkf as dependency for Ruby 3.4 support HOT 3
- Compatibility Inquiry: mechanize 2.10.0 with Ruby 3.3.0 HOT 4
- A
- ruby-head test failures related to the HTTP::Cookie API
- [Documentation] More examples? Specifically for imgur + ruby.
- Issue 403 when connecting to page with redirects
- tidy: do not send deprecated headers HOT 2
- Feature Request: Handle responses that require Brotli compression HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mechanize.