Hi Marcus,
The issue is likely related to Python and/or older versions of requests (the
python http library we use). The error is simply saying that SSLv3 is not
entertained by the (mgmt) server.
To fix this, you can:
1. Upgrade CloudMonkey (and its dependencies, if not using latest cloudmonkey),
and upgrade to Python 2.7.9 or above.
2. And/or monkey patch cloudmonkey.py file (put this in the beginning after all
the imports somewhere but before the class definition):
import ssl
from functools import wraps
def sslwrap(func):
@wraps(func)
def bar(*args, **kw):
kw[’ssl_version’] = ssl.PROTOCOL_TLSv1
return func(*args, **kw)
return bar
ssl.wrap_socket = sslwrap(ssl.wrap_socket) # this should work for any python
client facing such an issue
I’ve put a fix in master now, so you may also try to upgrade to latest
cloudmonkey from master branch.
> On 14-Apr-2015, at 4:03 am, Marcus <[email protected]> wrote:
>
> Is anyone else having trouble running CloudMonkey against a TLS-only
> cloudstack? Getting:
>
> (local) 🐵 > list zones
>
> Error Connection refused by server: [Errno 1] _ssl.c:507:
> error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
> handshake failure
>
> There's a lot of info about this online around python libs using only
> sslv3 by default, and we recently disabled sslv3 in CloudStack mgmt
> server.
Regards,
Rohit Yadav
Software Architect, ShapeBlue
M. +91 88 262 30892 | [email protected]
Blog: bhaisaab.org | Twitter: @_bhaisaab
Find out more about ShapeBlue and our range of CloudStack related services
IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//>
CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
CloudStack Software
Engineering<http://shapeblue.com/cloudstack-software-engineering/>
CloudStack Infrastructure
Support<http://shapeblue.com/cloudstack-infrastructure-support/>
CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-training/>
This email and any attachments to it may be confidential and are intended
solely for the use of the individual to whom it is addressed. Any views or
opinions expressed are solely those of the author and do not necessarily
represent those of Shape Blue Ltd or related companies. If you are not the
intended recipient of this email, you must neither take any action based upon
its contents, nor copy or show it to anyone. Please contact the sender if you
believe you have received this email in error. Shape Blue Ltd is a company
incorporated in England & Wales. ShapeBlue Services India LLP is a company
incorporated in India and is operated under license from Shape Blue Ltd. Shape
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is
operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company
registered by The Republic of South Africa and is traded under license from
Shape Blue Ltd. ShapeBlue is a registered trademark.
