1201993 - abort: error fetching bundle: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:590)

Status: RESOLVED FIXED

(Developer Services :: Mercurial: bundleclone, defect)

Description

[Wander Lairson Costa]

I am running mercurial 3.1.2 and Python 2.7.9 in a Ubuntu 15.04 machine.

15:54:08     INFO - Setting /home/wander/work/B2G-mozharness/build-tools to https://hg.mozilla.org/build/tools.
15:54:08     INFO - Cloning https://hg.mozilla.org/build/tools to /home/wander/work/B2G-mozharness/build-tools.
15:54:08     INFO - Running command: ['hg', '--config', 'ui.merge=internal:merge', 'clone', 'https://hg.mozilla.org/build/tools', '/home/wander/work/B2G-mozharness/build-tools']
15:54:08     INFO - Copy/paste: hg --config ui.merge=internal:merge clone https://hg.mozilla.org/build/tools /home/wander/work/B2G-mozharness/build-tools
15:54:10     INFO -  downloading bundle https://hg.cdn.mozilla.net/build/tools/ff50b94f6ebed52c615465213d1414501f134df0.gzip.hg
15:54:10    ERROR -  abort: error fetching bundle: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:590)
15:54:10    ERROR -  Automation Error: hg not responding
15:54:10     INFO -  (consider contacting the server operator if this error persists)
15:54:10    ERROR - Return code: 255

Comment 1

[Gregory Szorc [:gps]]

You may need a newer Mercurial version for its SSL support to be modern. As of a few hours ago, if you pull fx-team and run `mach bootstrap` it should know how to install a modern Mercurial on Ubuntu. Shortcut: `pip install --upgrade Mercurial`. I bet this problem goes away with Mercurial 3.5.1 (the current release).

Comment 2

[Gregory Szorc [:gps]]

If that works, we'll want to keep this bug open to make the extension not attempt to download from an SNI server on incompatible Mercurial versions.

Comment 3

[Wander Lairson Costa]

Indeed upgrading mercurial solved the issue. Notice `mach bootstrap` does not work on Ubuntu 15.04.  iiuc, there is no mercurial apt repository for vivid.

Comment 4

[Gregory Szorc [:gps]]

`mach bootstrap` works on Ubuntu 15.04 and installs Mercurial 3.5 as of a few days ago. Update to latest mozilla-central.

Comment 5

[Gregory Szorc [:gps]]

We should update bundleclone to detect old Mercurial and not attempt SNI there. I'll take this.

Comment 6

[Gregory Szorc [:gps]]

Attachment: MozReview Request: bundleclone: filter SNI URLs on Mercurial < 3.3 (bug 1201993); r?smacleod

bundleclone: filter SNI URLs on Mercurial < 3.3 (bug 1201993); r?smacleod

Mercurial versions before 3.3 did not leverage the modern SSL APIs
in Python 2.7.9+. As a result, they do not support SNI.

We update bundleclone to detect the Mercurial version and filter SNI
URLs when running on old Mercurial versions.

Comment 7

[Steven MacLeod [:smacleod]]

Comment on attachment 8658276 [details]
MozReview Request: bundleclone: filter SNI URLs on Mercurial < 3.3 (bug 1201993); r?smacleod

https://reviewboard.mozilla.org/r/18515/#review17045

Comment 8

[Gregory Szorc [:gps]]

https://hg.mozilla.org/hgcustom/version-control-tools/rev/e93d6e07ba3318cad889ccb05cd52f5778bb03ec
bundleclone: filter SNI URLs on Mercurial < 3.3 (bug 1201993); r=smacleod