Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Log Analytics: SSLV3_ALERT_HANDSHAKE_FAILURE #12322

Open
angristan opened this issue Dec 3, 2017 · 3 comments
Open

Log Analytics: SSLV3_ALERT_HANDSHAKE_FAILURE #12322

angristan opened this issue Dec 3, 2017 · 3 comments
Milestone
For Prioritization

Comments

@angristan
Copy link

Hello,

I'm trying to use the Log Analytics feature, but I encounter an SSL error:

root@server ~# python /srv/piwik/misc/log-analytics/import_logs.py --url=https://piwik.angristan.fr --idsite=5 /var/log/nginx/blog-access.log
2017-12-03 16:07:44,147: [INFO] Error when connecting to Piwik: <urlopen error [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:661)>
2017-12-03 16:07:44,148: [INFO] Retrying request, attempt number 2
2017-12-03 16:07:54,152: [INFO] Error when connecting to Piwik: <urlopen error [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:661)>
2017-12-03 16:07:54,152: [INFO] Retrying request, attempt number 3

It seems to come from urllib2, but I didn't manage to fix it:

I'm not using any particular cipher on my web server: https://www.ssllabs.com/ssltest/analyze.html?d=piwik.angristan.fr&s=2001%3abc8%3a275e%3a1f1%3a0%3a0%3a0%3a0
@Findus23
Copy link
Member

Findus23 commented Dec 3, 2017

I think it has something to do with the fact that your site only support TLS 1.2 (which is a good idea)

Which python version are you using?
I think only python versions greater than 2.7.9 support TLS 1.1 and newer

@angristan
Copy link
Author

angristan commented Dec 3, 2017 •
edited

I am using Python 2.7.13 with pyOpenSSL-17.5.0 on Debian 9.

Turns out I have this issue because I used a 384 bits ECDSA certificate on my Piwik. I tried with a 4096 bits RSA certificate, and it's working.

I assume it's Python problem, not much Piwik can do about it?

@robocoder
Copy link
Contributor

Maybe add a system check for the Piwik server's SSL certs?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
For Prioritization
Development

No branches or pull requests
4 participants
@robocoder @Findus23 @angristan @innocraft-automation