This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title: Test failure for test_ssl.test_default_ecdh_curve on OS X
Type: Stage: resolved
Components: Tests Versions: Python 3.4, Python 3.5
process
Status: closed Resolution: duplicate
Dependencies: Superseder: support SSL_CTX_set_ecdh_auto on newer OpenSSLs
View: 21015
Assigned To: Nosy List: jramnani, ned.deily
Priority: normal Keywords:

Created on 2014-04-14 17:57 by jramnani, last changed 2022-04-11 14:58 by admin. This issue is now closed.

Messages (2)
msg216138 - (view) Author: Jeff Ramnani (jramnani) * Date: 2014-04-14 17:57
The unittest, test_ssl.test_default_ecdh_curve, is failing on OS X (and FreeBSD 9).

The test fails with the error message:
"""
======================================================================
ERROR: test_default_ecdh_curve (test.test_ssl.ThreadedTests)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/Users/jramnani/code/cpython/Lib/test/test_ssl.py", line 2596, in test_default_ecdh_curve
    context.set_ciphers("ECDH")
ssl.SSLError: ('No cipher can be selected.',)

----------------------------------------------------------------------
"""

It looks to be related to issue, #21015 (changesets 3b81d1b3f9d1 and 869277faf3dc).


OS Info:
* Version: OS X 10.9.2
* OpenSSL version: OpenSSL 0.9.8y 5 Feb 2013


The problem looks like OpenSSL on OS X is reporting that it has ECDH when it does not.

Python 3.5.0a0 (default:8cf384852680, Apr 14 2014, 13:32:46)
[GCC 4.2.1 Compatible Apple LLVM 5.1 (clang-503.0.38)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> import ssl
>>> ssl.HAS_ECDH
True
msg216139 - (view) Author: Ned Deily (ned.deily) * (Python committer) Date: 2014-04-14 17:59
Thanks for the report. This is being tracked in Issue21015.
History
Date User Action Args
2022-04-11 14:58:01adminsetgithub: 65417
2014-04-14 17:59:31ned.deilysetstatus: open -> closed

superseder: support SSL_CTX_set_ecdh_auto on newer OpenSSLs

nosy: + ned.deily
messages: + msg216139
resolution: duplicate
stage: resolved
2014-04-14 17:57:48jramnanicreate