Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Heartbleed update needed #16

Closed
blindguyinanorgy opened this issue May 21, 2014 · 1 comment
Closed

Heartbleed update needed #16

blindguyinanorgy opened this issue May 21, 2014 · 1 comment

Comments

@blindguyinanorgy
Copy link

With the May 2014 update, the protocol has been upgraded to protect against heartbleed. Additional tokens are needed, which I can see after the login step. I do not know how to update the authentication headers for the status request.

This looks like the same issue people are having in issue #13

New header information received:

"weave":{"service_config":"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","pairing_token":"wu.wrG5K0ngGjFqrXFxguuqBw0XWuE5JEb+Negty0yhbbN1AdR5wSpsITa1tD3D7urLhPmTDoxaTmxMYWWIMRIvtVZEiYI=","access_token":"lQkANQEwAQhfcr1Dk7RU5iQCBDcDLAEGNDM1ODA5GCYEXlaIGiYF3lCvLTcGLAEGNDM1ODA5GCQHAiYIJQBaIzAKOQSNSMTZs8+ereX0/Nk+UJXK4lnQDhZ1ZHmE/gyo+4zKtDPAgHSNEoacZ8IO4R27aQM8xGqhU5HNGDWDKQEYNYIpASQCBRg1hCkBNgIEAgQBGBg1gTACCE3WJS0sl/c+GDWAMAIITdYlLSyX9z4YNQwwAR0A9zyiCSScjl1YjgBI2jnHwiFqfFvbTfidlm0epzACG08SffZ22gRkoYj0/aZxDLOXrkPvKCkTtasDxBgYNQImASUAWiMwAh0A2p7qx3JbS7MJZiKkrExVLrGRJwGG4Q3t8NjDZxgY"}}

@blindguyinanorgy
Copy link
Author

it had nothing to do with the "weave" data. i had to force the connection to be TSLv1

add to top

import ssl
import httplib, socket

class HTTPSConnectionV1(httplib.HTTPSConnection):
def init(self, _args, *_kwargs):
httplib.HTTPSConnection.init(self, _args, *_kwargs)

def connect(self):
    sock = socket.create_connection((self.host, self.port), self.timeout)
    if self._tunnel_host:
        self.sock = sock
        self._tunnel()
    try:
        self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file, ssl_version=ssl.PROTOCOL_TLSv1)
    except ssl.SSLError, e:
        print("Trying SSLv3.")
        self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file, ssl_version=ssl.PROTOCOL_TLSv1)

class HTTPSHandlerV1(urllib2.HTTPSHandler):
def https_open(self, req):
return self.do_open(HTTPSConnectionV1, req)

install opener

urllib2.install_opener(urllib2.build_opener(HTTPSHandlerV1()))

This was referenced May 21, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant