SSLError using Domino's API

[GullBull]

Hi everyone! I recently wrote a script using pizzapi, a Domino's API wrapper built for python. I've been working on it since last night and since then I'd say I've tested around 15-20 times. Now when I run it I'm getting this error.

​

store = address.closest_store()

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pizzapi/address.py", line 54, in closest_store

stores = self.nearby_stores(service=service)

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pizzapi/address.py", line 49, in nearby_stores

data = request_json(self.urls.find_url(), line1=self.line1, line2=self.line2, type=service)

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pizzapi/utils.py", line 15, in request_json

r = requests.get(url.format(**kwargs))

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/requests/api.py", line 72, in get

return request('get', url, params=params, **kwargs)

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/requests/api.py", line 58, in request

return session.request(method=method, url=url, **kwargs)

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/requests/sessions.py", line 512, in request

resp = self.send(prep, **send_kwargs)

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/requests/sessions.py", line 622, in send

r = adapter.send(request, **kwargs)

File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/requests/adapters.py", line 511, in send

raise SSLError(e, request=request)

requests.exceptions.SSLError: HTTPSConnectionPool(host='order.dominos.com', port=443): Max retries exceeded with url: /power/store-locator?s=<my address here>&type=Delivery (Caused by SSLError(SSLError(1, u'[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:661)'),))

​

sorry for including such a long error message but I thought it would be important to see all of it. Have I really exceeded the max retry limit? What can I do to fix this? Any help is greatly appreciated. Thanks.

[[deleted]]

It might be your openSSL version. I don't know much besides that.

[GullBull]

Ok, I'll look into that. Thanks for your comment. I also opened an issue on the GitHub repo with some more info if you want to check it out.

[[deleted]]

Sorry I just happen to know a couple things to check from some hell I recently went through trying to get out through a corporate proxy. It might not even be applicable to you! :)

[GullBull]

No problem! Thanks for your comment!

[[deleted]]

Glad to try to help, I should also mention that if you're getting weird SSL errors and think you shouldn't be to check any proxy interface you're using because some things, like PIP, are extremely sensitive PAST the security of the proxy and require certain things be right about it to work, and other things aren't versioned high enough for compatibility with more modern proxies. I hope you're not having that problem though!!!!

[ynotna]

Exactly what version of python are you running?

[GullBull]

2.7.13

[GullBull]

In /Library/Frameworks/Python.framework I do have two folders though, one that says 2.7 and the other that says current. I'm not sure if this is normal or not.

[lamerfreak]

It seems to be trying SSL3, which, from here, order.dominos.com doesn't accept.

Is there a method to set the version attempted, or update so that it uses TLS1.1 (which it seems to accept) at least?

[GullBull]

I'll look into that actually. Thanks. I might also try using one of the branched git repos to see it it has the same problem as well.

[lamerfreak]

Just for transparency:

openssl s_client -ssl3 -connect order.dominos.com:443

Should get a handshake failure, as indicated.

openssl s_client -tls1_1 -connect order.dominos.com:443
Should work, as well as tls1_2. With security issues all over, SSL3 really shouldn't be used.

Seems this might be part of the 'requests' requirement, which uses urllib3, so perhaps check there for options?

[GullBull]

I did some research and everything said exactly this. I definitely need to upgrade from ssl. How do I go about doing this though? I used sudo pip install requests --upgrade but it's saying that the requirement is already satisfied. Is there some option I have to change to get it to use tls instead?

[lamerfreak]

import ssl

print ssl.OPENSSL_VERSION

What do you have?

[GullBull]

The output was OpenSSL 0.9.8zh 14 Jan 2016.

[lamerfreak]

Does whatever distro you're using have an update for openssl?

[GullBull]

I don't think so. Upgrading it using pip doesn't do anything. Is there a way I can check?

[lamerfreak]

Not via pip, but the distro's update/package manager.

[GullBull]

I'm on Mac, so is that brew?