question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

SSLv3 handshake failure

See original GitHub issue
openssl 1.1.1.d
python 3.8.0
cfscrape 2.0.8

If using DEFAULT_CIPHERS as a suggested workaround for cfscrape cannot solve captchas (#309), I get an SSLv3 error. Downloading the file via requests works fine.

HTTPSConnectionPool(host='edge.forgecdn.net', port=443): Max retries exceeded with url: /files/2819/400/AbyssalCraft-1.12.2-1.9.13.1.jar (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'ssl3_read_bytes', 'sslv3 alert handshake failure')])")))

Example code:

#!/bin/python
import os, requests, cfscrape

cfscrape.DEFAULT_CIPHERS = 'TLS_AES_256_GCM_SHA384:ECDHE-ECDSA-AES256-SHA384'
scraper = cfscrape.create_scraper()

response = requests.get("https://edge.forgecdn.net/files/2819/400/AbyssalCraft-1.12.2-1.9.13.1.jar")
print(response)

response = scraper.get("https://edge.forgecdn.net/files/2819/400/AbyssalCraft-1.12.2-1.9.13.1.jar")
print(response)

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:7 (1 by maintainers)

github_iconTop GitHub Comments

1reaction
ilu33commented, Dec 13, 2019

I solved the issue for me with using

cfscrape.DEFAULT_CIPHERS = 'TLS_AES_256_GCM_SHA384:kECDHE'

kECDHE is the relevant cipher for edge.forgecdn.net.

1reaction
C0rn3jcommented, Dec 12, 2019

Whatever the issue is, cloudscraper which is a project that I use now as a drop-in replacement got it right, so would be worth to look there

Read more comments on GitHub >

github_iconTop Results From Across the Web

ssl - Solving sslv3 alert handshake failure when trying to use a ...
It works when I try with a received a test certificate including a private key from the service (self signed certificate). But when...
Read more >
SSL3_READ_BYTES:sslv3 alert handshake failure - How to fix?
SSLV3 alert handshake failure occurs when a client and server cannot establish communication using the TLS/SSL protocol.
Read more >
What Is SSL Handshake & How Do I Fix SSL ... - HubSpot Blog
SSL Handshake Failed is an error message that occurs when the client or server wasn't able to establish a secure connection.
Read more >
HTTP sslv3 alert handshake failure - IBM
HTTP sslv3 alert handshake failure · 1- Cipher Strength setting in the HTTP Server Adapter is incorrect · 2- If you are using...
Read more >
TLS/SSL Handshake Failures | Apigee Edge
A TLS/SSL handshake failure occurs if the protocol used by the client is not supported by the server either at the incoming (northbound)...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found