SSL23_GET_SERVER_HELLO:sslv3
#1
Since yesterday on
https://www.youtv.de/

i get the error::
URLError: <urlopen error [Errno 1] _ssl.c:510: error:14077410:SSL routines:SSL23_GET_SERVER_HELLOConfusedslv3 alert handshake failure>

I Use:

Code:
def getUrl(url,data="x",token=""):
        https=addon.getSetting("https")
        if https=="true":
           url=url.replace("https","http")
        print("Get Url: " +url)
        opener = urllib2.build_opener(urllib2.HTTPCookieProcessor())
        userAgent = "YOUTV/1.2.7 CFNetwork/758.2.8 Darwin/15.0.0"
        if token!="":
           mytoken="Token token="+ token
           opener.addheaders = [('User-Agent', userAgent),
                                ('Authorization', mytoken)]
        else:
           opener.addheaders = [('User-Agent', userAgent)]
        try:
          if data!="x" :
             content=opener.open(url,data=data).read()
          else:
             content=opener.open(url).read()
        except urllib2.HTTPError as e:
             #print e.code  
             cc=e.read()  
             struktur = json.loads(cc)  
             error=struktur["errors"][0]
             error=unicode(error).encode("utf-8")
             debug("ERROR : " + error)
             dialog = xbmcgui.Dialog()
             nr=dialog.ok("Error", error)
             return ""
            
        opener.close()
        return content

Changing to http works, but im no fan of sending data (Login) without encryption

Mayby Someone has an idea what i could change
Reply
#2
I'm no Kodi expert, but I do know SSL. Based on my check (using https://www.ssllabs.com/ssltest/analyze.....de&latest tester), the site recently renewed their SSL certs (as of Wed, 16 Mar 2016 00:00:00 UTC) and they no longer support SSLv3. That makes sense, everybody is dropping that insecure version of SSL. The problem is with Kodi itself which isn't using one of the supported protocol. I would raise this as a major bug with the developer team because more and more web sites are dropping SSL and only support TLS:


Code:
Protocols
TLS 1.2    Yes
TLS 1.1    Yes
TLS 1.0    Yes
SSL 3    No
SSL 2    No


Cipher Suites (SSL 3+ suites in server-preferred order; deprecated and SSL 2 suites at the end)
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)   ECDH secp256r1 (eq. 3072 bits RSA)   FS    128
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)   ECDH secp256r1 (eq. 3072 bits RSA)   FS    128
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)   ECDH secp256r1 (eq. 3072 bits RSA)   FS    128
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)   ECDH secp256r1 (eq. 3072 bits RSA)   FS    256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)   ECDH secp256r1 (eq. 3072 bits RSA)   FS    256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)   ECDH secp256r1 (eq. 3072 bits RSA)   FS    256
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)    128
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d)    256
TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c)    128
TLS_RSA_WITH_AES_256_CBC_SHA (0x35)    256
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)    128
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa)    112

Edit I just checked the addon that I'm writing and it is going against a server which does not have SSLv3 enabled as well. I don't get this kind of connection error with my addon, so I'm not sure what is wrong with your Kodi. Sorry.
Reply
#3
@DigitalLachance

Its not only my Kodi. on my Plugin its about 1/10 of the User where it still works the rest have the same Problem
Let me guess, you are using Krypton?

On my Tests, on Krypton (nightly) it is working
Reply
#4
(2016-04-19, 23:12)L0RE Wrote: @DigitalLachance

On my Tests, on Krypton (nightly) it is working

I'm using the current stable release 16.0. Is your addon in the main repository? Maybe I can try it.
Reply
#5
Its on lost found repo: https://github.com/kodinerds/repo/raw/ma...-found.zip
Or only the plugin:
https://github.com/kodinerds/repo/tree/m...ideo.youtv

Since its a german page the thread is
http://www.kodinerds.net/index.php/Threa...ase-Youtv/
Reply
#6
I'm having the same issue with my addon as well. It's a bit surprising that this issue has not been resolved in Kodi (if this is where it should be fixed).
If anyone know of a fix or workaround I would very much appreciate it.
As of now my addon is dead...
Reply
#7
Its been fixed in krypton. The problem is the older python version in Jarvis. Before you ask: No we won't backport python 2.7 to Jarvis.
Reply
#8
(2016-07-03, 10:38)wsnipex Wrote: Its been fixed in krypton. The problem is the older python version in Jarvis. Before you ask: No we won't backport python 2.7 to Jarvis.

Thank you so much, the addon is working in Krypton.
I've instructed all my users to upgrade to Krypton if they want to run the addon.
Many thanks Smile
Reply
#9
(2016-07-03, 10:38)wsnipex Wrote: Its been fixed in krypton. The problem is the older python version in Jarvis. Before you ask: No we won't backport python 2.7 to Jarvis.

Does this apply to Krypton on Ubuntu as well?
I ask this because I have users that are reporting the very same SSL errors when running Krypton (alpha 3) on Unbuntu.
Reply
#10
we use system python on linux, so it depends on the distro if the python version is new enough. Ubuntu 16.04 has 2.7.11
Reply

Logout Mark Read Team Forum Stats Members Help
SSL23_GET_SERVER_HELLO:sslv30