Closed Bug 1201993 Opened 6 years ago Closed 6 years ago

abort: error fetching bundle: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:590)

Categories

(Developer Services :: Mercurial: bundleclone, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: wcosta, Assigned: gps)

References

Details

Attachments

(1 file)

I am running mercurial 3.1.2 and Python 2.7.9 in a Ubuntu 15.04 machine.

15:54:08     INFO - Setting /home/wander/work/B2G-mozharness/build-tools to https://hg.mozilla.org/build/tools.
15:54:08     INFO - Cloning https://hg.mozilla.org/build/tools to /home/wander/work/B2G-mozharness/build-tools.
15:54:08     INFO - Running command: ['hg', '--config', 'ui.merge=internal:merge', 'clone', 'https://hg.mozilla.org/build/tools', '/home/wander/work/B2G-mozharness/build-tools']
15:54:08     INFO - Copy/paste: hg --config ui.merge=internal:merge clone https://hg.mozilla.org/build/tools /home/wander/work/B2G-mozharness/build-tools
15:54:10     INFO -  downloading bundle https://hg.cdn.mozilla.net/build/tools/ff50b94f6ebed52c615465213d1414501f134df0.gzip.hg
15:54:10    ERROR -  abort: error fetching bundle: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:590)
15:54:10    ERROR -  Automation Error: hg not responding
15:54:10     INFO -  (consider contacting the server operator if this error persists)
15:54:10    ERROR - Return code: 255
You may need a newer Mercurial version for its SSL support to be modern. As of a few hours ago, if you pull fx-team and run `mach bootstrap` it should know how to install a modern Mercurial on Ubuntu. Shortcut: `pip install --upgrade Mercurial`. I bet this problem goes away with Mercurial 3.5.1 (the current release).
Summary: Cannot clone mercurial repository → abort: error fetching bundle: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:590)
If that works, we'll want to keep this bug open to make the extension not attempt to download from an SNI server on incompatible Mercurial versions.
Indeed upgrading mercurial solved the issue. Notice `mach bootstrap` does not work on Ubuntu 15.04.  iiuc, there is no mercurial apt repository for vivid.
`mach bootstrap` works on Ubuntu 15.04 and installs Mercurial 3.5 as of a few days ago. Update to latest mozilla-central.
We should update bundleclone to detect old Mercurial and not attempt SNI there. I'll take this.
Assignee: nobody → gps
Status: NEW → ASSIGNED
bundleclone: filter SNI URLs on Mercurial < 3.3 (bug 1201993); r?smacleod

Mercurial versions before 3.3 did not leverage the modern SSL APIs
in Python 2.7.9+. As a result, they do not support SNI.

We update bundleclone to detect the Mercurial version and filter SNI
URLs when running on old Mercurial versions.
Attachment #8658276 - Flags: review?(smacleod)
Comment on attachment 8658276 [details]
MozReview Request: bundleclone: filter SNI URLs on Mercurial < 3.3 (bug 1201993); r?smacleod

https://reviewboard.mozilla.org/r/18515/#review17045
Attachment #8658276 - Flags: review?(smacleod) → review+
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Blocks: 1190766
You need to log in before you can comment on or make changes to this bug.