topic Re: Has nuxeo drive 2.0 a problem with SSL ? in Nuxeo Forum

Has nuxeo drive 2.0 a problem with SSL ?

ftorchet_ — Wed, 09 Sep 2015 15:14:19 GMT

It's possible this question is a duplicate of nuxeo-drive-and-ssl_ciphers

Server : nuxeo-5.8-HF30 / nuxeo-6.0-HF15 nuxeo-drive : 2.0.818 client OS : windows 7

Since I upgraded nuxeo-drive client, it's unable to connect to nuxeo with "https" protocol... If I configure nxdrive URL with "http://myhost/nuxeo" : OK with "https://myhost/nuxeo" : KO (obviously, direct access with browser works fine)

In the log file :

Traceback (most recent call last): File "nuxeo-drive-client\nxdrive\wui\settings.py", line 200, in _connect_startup_page File "C:\Python27\lib\httplib.py", line 1053, in request

File "C:\Python27\lib\httplib.py", line 1093, in _send_request """Compat definition since superclass does not define it. File "C:\Python27\lib\httplib.py", line 1049, in endheaders

File "C:\Python27\lib\httplib.py", line 893, in _send_output self.putheader('Host', netloc_enc) File "C:\Python27\lib\httplib.py", line 855, in send else: File "C:\Python27\lib\httplib.py", line 1274, in connect self._line_left = len(line) File "C:\Python27\lib\ssl.py", line 352, in wrap_socket ciphers=self.ciphers, File "C:\Python27\lib\ssl.py", line 579, in init File "C:\Python27\lib\ssl.py", line 808, in do_handshake SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)

I observed the phenomenon with nuxeo-5.8 and nuxeo-6.0 server... With the nuxeo-drive-1.x client, everything OK (nuxeo-5.8 access only)

N.B : Certificate on nuxeo-5.8 is a real one... not an autosigned certificate...

What I'm missing ?

Re: Has nuxeo drive 2.0 a problem with SSL ?

ataillefer_ — Wed, 09 Sep 2015 15:19:51 GMT

Hello,

Some fixes regarding the startup page connexion have been made since 2.0.818. Can you please try the latest development build: http://qa.nuxeo.org/jenkins/view/Drive/job/nuxeo-drive-msi/1126/artifact/dist/nuxeo-drive-2.0.909-win32.msi

Re: Has nuxeo drive 2.0 a problem with SSL ?

ftorchet_ — Wed, 09 Sep 2015 15:53:23 GMT

Here is the result with nuxeo-6 and nuxeo-5.8

Re: Has nuxeo drive 2.0 a problem with SSL ?

ftorchet_ — Thu, 10 Sep 2015 08:15:12 GMT

I wondered if my Python installation (used to work with nuxeo sources) caused problems...

Re: Has nuxeo drive 2.0 a problem with SSL ?

ataillefer_ — Thu, 10 Sep 2015 08:57:17 GMT

I have no clue, could be related to http

Re: Has nuxeo drive 2.0 a problem with SSL ?

ftorchet_ — Thu, 10 Sep 2015 11:35:39 GMT

I try the client on an another station (without Python, without nuxeo-drive...)

Re: Has nuxeo drive 2.0 a problem with SSL ?

ftorchet_ — Mon, 14 Sep 2015 06:53:07 GMT

I finally found an explanation which seems correct to me : My system had obsolete certificates associated to our organisation and nuxeo-drive tried to use them...

I removed these certificates (configuration panel, internet options) and nuxeo-drive could connect !

Thanks for your help and your attention...