Support Forum

I removed the link and downloaded an nzb over NNTPS, this worked.

Perhaps that doesn't use urllib and doesn't verify the SSL certificate, or verifies in a different way. Not quite sure how to determine that.

Sorry for the post spam, I don't know what the etiquette is for creating a new post or updating an previous one. However, I can confirm that this solves the issue for sabnzbd as well on FreeBSD! This is a FreeBSD specific issue related to the new Python release and how it handles certificates. So fo...

I got the test script working! First you need to make sure that the package ca_root_nss is installed. (It is by default) Check by running: pkg info | grep ca_root_nss Then link the installed certificates to a place where Python looks by default: ln -s /usr/local/share/certs/ca-root-nss.crt /etc/ssl/...

This url: https://www.python.org/dev/peps/pep-0476/ shows how to disable the new feature of 2.7.9. import ssl ssl._create_default_https_context = ssl._create_unverified_context Applying that to the test script makes it work. (Without a proper certificate validation, basically like running 2.7.8 ) It...

I have a brand new VM with the latest FreeBSD and latest Python: uname -ra FreeBSD git 10.1-RELEASE FreeBSD 10.1-RELEASE #0 r274401: Tue Nov 11 21:02:49 UTC 2014 root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64 /usr/local/bin/python2 --version Python 2.7.9 When connecting to google.co...

I have done a bit of research, and perhaps someone with better knowledge of the subject could verify this, but I think it doesn't matter if SSLv3 is used. The POODLE attack is based around the attacker forcing the connection to fallback to SSLv3. That is why Chrome is opting to disable the fallback ...

I managed to downgrade to Python 2.7.8 and this "solves" the problem. Sabnzbd is able to download nzb's from usenet-crawler once again. However it is still vulnerable to the POODLE attack. (I even believe i didn't check ssl certs at all) These attacks do require a bit of effort on the atta...

Jep still vulnerable. I don't really want to downgrade, but i do want to use sabnzbd.... Haven't figured out yet how to do that.

lang/python27: Update to 2.7.9 The FreeBSD Python team welcomes Python 2.7.9 to the Ports tree! Announcement: https://www.python.org/downloads/release/python-279/ Changelog: http://hg.python.org/cpython/raw-file/v2.7.9/Misc/NEWS Important changes for this release: - The entirety of Python 3.4's ssl...

It is probably due to openssl: openssl s_client -connect www.google.com:443 CONNECTED(00000003) depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA verify error:num=20:unable to get local issuer certificate verify return:0 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google...

I read that by default ssl shouldn't be validated using urllib. It does however try to do that. I am trying to figure out how a) python does ssl validation b) to temporarily disable that Weird that it does work on your machine. Must be a FreeBSD Python specific thing. Good suggestion about the googl...

I tried it without the https: 2014-12-30 18:55:49,756::INFO::[urlgrabber:117] Grabbing URL http://www.usenet-crawler.com/getnzb/xx 2014-12-30 18:55:49,872::DEBUG::[urlgrabber:136] SJ: I got in the except due to <type 'exceptions.IOError'> 2014-12-30 18:55:49,872::DEBUG::[urlgrabber:375] No response ...

There we go: Traceback (most recent call last): File "test.py", line 7, in <module> fn, header = opener.retrieve(url) File "/usr/local/lib/python2.7/urllib.py", line 245, in retrieve fp = self.open(url, data) File "/usr/local/lib/python2.7/urllib.py", line 213, in open ...

Thanks for the quick reply. I had seen that topic, thought it was a slightly different issue. I did check for the duplicate content length (wasn't there). I tried changing the url grabber. This crashes on the exception handling. URLGRABBER CRASHED Traceback (most recent call last): File "/usr/l...

Hi, I seem to be having a strange problem. I keep getting these messages: 2014-12-30 17:49:44,374::INFO::[urlgrabber:116] Grabbing URL https://www.usenet-crawler.com/getnzb/xxxx 2014-12-30 17:50:06,475::DEBUG::[urlgrabber:372] No response from indexer, retry after 60 sec 2014-12-30 17:50:06,475::INF...