Re: [S3tools-bugs] Problem: SSLError: [Errno 8] _ssl.c:510: EOF occurred in violation of protocol with s3cmd

[Florent V. <flo...@se...>]

Hi Stefan,

I have also heard about someone encountering such an issue "EOF occurred in
violation of protocol".

I have spent some time trying to investigate this, but haven't found yet
something really clear.
It looks like that it has to do with the fact that python try first to
connect through the sslv2/3 protocol, instead of using tls1 (that is the
most recent/secure thing).
But, because of recent issues with sslv2, some network devices when in
between the client and the server could block or at least do invalid things
when sslv2 is requested.

Maybe you can find more details here:
http://stackoverflow.com/questions/14102416/python-requests-requests-exceptions-sslerror-errno-8-ssl-c504-eof-occurred
In the case I had investigated, the issue was caused either by a cisco
router or by a transparent firewall in the network.

I saw that also for some cisco devices:
http://answers.splunk.com/answers/105193/cisco-ips-error-errno-8.html#135759

I'm sorry to not have a direct solution for you but it is so far that I
went.

Regards,

--
Florent <http://www.seagate.com>

On Thu, Aug 20, 2015 at 2:36 AM, Matt Domsch <ma...@do...> wrote:

> This looks like your SSL proxy server closed the connection for some
> reason, which the python SSL library didn't expect, so it failed out.
>
> On Thu, Aug 13, 2015 at 8:33 AM, Stefan Hazenbroek <
> ste...@de...> wrote:
>
>> Hi,
>>
>> I'm running into an issue running s3cmd. I have tried upgrading to the
>> latest version, but am still receiving the same issue. Would you be able to
>> help out? Full (anonymized) information can be found below.
>>
>> We're using a proxy (http_proxy) configured through export http_proxy,
>> which handles both SSL and non-SSL connections (export https_proxy is
>> configured to the same proxy server using a http:// address).
>>
>> Thanks in advance for your response. Code below.
>> ---
>>
>> Invoked as: /opt/s3cmd/s3cmd -c /opt/s3cmd/s3.conf sync --exclude-from
>> exclude s3://<BUCKET>/<FOLDER>/ --signature-v2 <OUTPUTFOLDER>
>> Problem: SSLError: [Errno 8] _ssl.c:510: EOF occurred in violation of
>> protocol
>> S3cmd:   1.5.2
>> python:   2.7.6 (default, Jun 22 2015, 17:58:13)
>> [GCC 4.8.2]
>> environment LANG=en_US.UTF-8
>>
>> Traceback (most recent call last):
>>   File "/opt/s3cmd/s3cmd", line 2669, in <module>
>>     rc = main()
>>   File "/opt/s3cmd/s3cmd", line 2577, in main
>>     rc = cmd_func(args)
>>   File "/opt/s3cmd/s3cmd", line 1574, in cmd_sync
>>     return cmd_sync_remote2local(args)
>>   File "/opt/s3cmd/s3cmd", line 1014, in cmd_sync_remote2local
>>     remote_list, src_exclude_list = fetch_remote_list(args[:-1],
>> recursive = True, require_attribs = True)
>>   File "/opt/s3cmd/S3/FileLists.py", line 444, in fetch_remote_list
>>     objectlist = _get_filelist_remote(uri, recursive = True)
>>   File "/opt/s3cmd/S3/FileLists.py", line 419, in _get_filelist_remote
>>     _get_remote_attribs(S3Uri(object_uri_str), rem_list[key])
>>   File "/opt/s3cmd/S3/FileLists.py", line 347, in _get_remote_attribs
>>     response = S3(cfg).object_info(uri)
>>   File "/opt/s3cmd/S3/S3.py", line 786, in object_info
>>     response = self.send_request(request)
>>   File "/opt/s3cmd/S3/S3.py", line 1021, in send_request
>>     conn = ConnMan.get(self.get_hostname(resource['bucket']))
>>   File "/opt/s3cmd/S3/ConnMan.py", line 161, in get
>>     conn.c.connect()
>>   File "/usr/lib/python2.7/httplib.py", line 1182, in connect
>>     self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file)
>>   File "/usr/lib/python2.7/ssl.py", line 487, in wrap_socket
>>     ciphers=ciphers)
>>   File "/usr/lib/python2.7/ssl.py", line 243, in __init__
>>     self.do_handshake()
>>   File "/usr/lib/python2.7/ssl.py", line 405, in do_handshake
>>     self._sslobj.do_handshake()
>> SSLError: [Errno 8] _ssl.c:510: EOF occurred in violation of protocol
>>
>>
>> ------------------------------------------------------------------------------
>>
>>
>
>
> ------------------------------------------------------------------------------
>
>