➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author christian.heimes
Recipients Matt Wright, christian.heimes
Date 2016-09-15.15:54:28
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1473954868.44.0.541911246612.issue28170@psf.upfronthosting.co.za>
In-reply-to
Content 
Do you happen to talk to an ElasticSearch cluster with a GEN_RID in the subject alternative name field? It's a known bug in Python's ssl code. The fix #27691 will be in the next releases of 2.7 and 3.5.

In the mean time you can work around the bug by reconfiguring your ES cluster and application. You have to use different certs for node <-> client and node <-> node communication. OID 1.2.3.4.5.5 should only be in the cluster communication certs. https://github.com/floragunncom/search-guard-docs/blob/1a35ec309661f7b8fb1efc2586fc298dcb7cb139/installation.md#generating-a-server-certificate
History
Date User Action Args
2016-09-15 15:54:28christian.heimessetrecipients: + christian.heimes, Matt Wright
2016-09-15 15:54:28christian.heimessetmessageid: <1473954868.44.0.541911246612.issue28170@psf.upfronthosting.co.za>
2016-09-15 15:54:28christian.heimeslinkissue28170 messages
2016-09-15 15:54:28christian.heimescreate