cancel
Showing results for 
Search instead for 
Did you mean: 

Has nuxeo drive 2.0 a problem with SSL ?

ftorchet_
Champ in-the-making
Champ in-the-making

It's possible this question is a duplicate of nuxeo-drive-and-ssl_ciphers

Server : nuxeo-5.8-HF30 / nuxeo-6.0-HF15 nuxeo-drive : 2.0.818 client OS : windows 7

Since I upgraded nuxeo-drive client, it's unable to connect to nuxeo with "https" protocol... If I configure nxdrive URL with "http://myhost/nuxeo" : OK with "https://myhost/nuxeo" : KO (obviously, direct access with browser works fine)

In the log file :

Traceback (most recent call last): File "nuxeo-drive-client\nxdrive\wui\settings.py", line 200, in _connect_startup_page File "C:\Python27\lib\httplib.py", line 1053, in request

File "C:\Python27\lib\httplib.py", line 1093, in _send_request """Compat definition since superclass does not define it. File "C:\Python27\lib\httplib.py", line 1049, in endheaders

File "C:\Python27\lib\httplib.py", line 893, in _send_output self.putheader('Host', netloc_enc) File "C:\Python27\lib\httplib.py", line 855, in send else: File "C:\Python27\lib\httplib.py", line 1274, in connect self._line_left = len(line) File "C:\Python27\lib\ssl.py", line 352, in wrap_socket ciphers=self.ciphers, File "C:\Python27\lib\ssl.py", line 579, in init File "C:\Python27\lib\ssl.py", line 808, in do_handshake SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)

I observed the phenomenon with nuxeo-5.8 and nuxeo-6.0 server... With the nuxeo-drive-1.x client, everything OK (nuxeo-5.8 access only)

N.B : Certificate on nuxeo-5.8 is a real one... not an autosigned certificate...

What I'm missing ?

6 REPLIES 6

ataillefer_
Star Contributor
Star Contributor

Hello,

Some fixes regarding the startup page connexion have been made since 2.0.818. Can you please try the latest development build: http://qa.nuxeo.org/jenkins/view/Drive/job/nuxeo-drive-msi/1126/artifact/dist/nuxeo-drive-2.0.909-wi...

Here is the result with nuxeo-6 and nuxeo-5.8

I wondered if my Python installation (used to work with nuxeo sources) caused problems...

I have no clue, could be related to http

I try the client on an another station (without Python, without nuxeo-drive...)

ftorchet_
Champ in-the-making
Champ in-the-making

I finally found an explanation which seems correct to me : My system had obsolete certificates associated to our organisation and nuxeo-drive tried to use them...

I removed these certificates (configuration panel, internet options) and nuxeo-drive could connect !

Thanks for your help and your attention...

Getting started

Find what you came for

We want to make your experience in Hyland Connect as valuable as possible, so we put together some helpful links.