Python 2.6 SSL module: Fails on key file error, with Errno 336265225, without a key file.

John Nagle nagle at animats.com
Mon Apr 19 01:37:30 EDT 2010


     I'm starting to convert from M2Crypto to Python 2.6's SSL
module. So I tried a trivial test:

import ssl
import socket
certs = "d:/projects/sitetruth/certificates/cacert.pem"
sk = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
ssk = ssl.wrap_socket(sk, certfile=certs, cert_reqs=ssl.CERT_NONE)
ssk.connect(("www.verisign.com",443))

This is a basic HTTPS open sequence.

This yields:

Traceback (most recent call last):
   File "<stdin>", line 1, in <module>
   File "D:\python26\lib\ssl.py", line 307, in connect
     self.ca_certs)
ssl.SSLError: [Errno 336265225] _ssl.c:337:
  error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib

The cert file is the same PEM file I use with M2Crypto, and it's
derived from Firefox's cert file.

Why am I getting a "private key" related error?  I'm not submitting a keyfile,
just a cert file.

I've tried explicitly adding "keyfile=None" to the wrap_socket call, but
that doesn't change anything.

Python version: '2.6.1 (r261:67517, Dec  4 2008, 16:51:00) [MSC v.1500 32 bit 
(Intel)]'

					John Nagle



More information about the Python-list mailing list