Bug 1554760

Summary: Don't send IP address as SNI TLS extension
Product: [Fedora] Fedora Reporter: Christian Heimes <cheimes>
Component: python2Assignee: Charalampos Stratakis <cstratak>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 28CC: bkabrda, cstratak, dmalcolm, extras-orphan, mcyprian, mhroncok, pviktori, rkuska, tomspur, torsava
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: python2-2.7.14-7.fc26 python2-2.7.14-10.fc27 python2-2.7.14-15.fc28 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1555314 (view as bug list) Environment:
Last Closed: 2018-03-20 17:34:05 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1555314    

Description Christian Heimes 2018-03-13 10:16:47 UTC
Description of problem:
Python's ssl module sends IP addresses in SNI TLS extension although the extension must only be used to send hostnames. Some servers simply ignore IP addresses in extensions while others seem to fail. Ansible has been hitting the issue, e.g. see https://github.com/shazow/urllib3/pull/1287#issuecomment-372611467

Version-Release number of selected component (if applicable):
python2-2.7.14-8.fc27.x86_64
python3-3.6.4-8.fc27.x86_64

How reproducible:
Always

Additional info:
Fixes for 2.7 and 3.6 are available in https://github.com/python/cpython/pull/5871
and https://github.com/python/cpython/pull/5865 .

Comment 1 Charalampos Stratakis 2018-03-13 10:47:16 UTC
Reassigning to the correct component as the python package was renamed to python2.

Comment 2 Fedora Update System 2018-03-14 16:22:34 UTC
python2-2.7.14-10.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2018-a9d2b42ad4

Comment 3 Fedora Update System 2018-03-14 16:25:57 UTC
python2-2.7.14-7.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2018-031d0ddaa3

Comment 4 Fedora Update System 2018-03-14 20:07:31 UTC
python2-2.7.14-7.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-031d0ddaa3

Comment 5 Fedora Update System 2018-03-14 20:45:01 UTC
python2-2.7.14-10.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-a9d2b42ad4

Comment 6 Fedora Update System 2018-03-15 10:06:33 UTC
python2-2.7.14-15.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-a84c91e538

Comment 7 Fedora Update System 2018-03-15 13:32:48 UTC
python2-2.7.14-15.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-a84c91e538

Comment 8 Charalampos Stratakis 2018-03-15 15:05:10 UTC
*** Bug 1554761 has been marked as a duplicate of this bug. ***

Comment 9 Fedora Update System 2018-03-20 17:34:05 UTC
python2-2.7.14-7.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.

Comment 10 Fedora Update System 2018-03-20 18:20:40 UTC
python2-2.7.14-10.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.

Comment 11 Fedora Update System 2018-03-30 12:56:35 UTC
python2-2.7.14-15.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.