[boobank][banquepopulaire] ssl error during login
I have been always getting the following ssl error for the last weeks:
2020-03-28 16:17:47,960:WARNING:urllib3.connectionpool:2.1:connectionpool.py:744:urlopen Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, '[SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:1108)'))': /api/oauth/v2/authorize?nonce=59d09bff&scope=&response_type=id_token+token&response_mode=form_post&cdetab=10207&login_hint=anonymized&display=page&client_id=anonymized&claims=%7B%22userinfo%22%3A%7B%22cdetab%22%3Anull%2C%22authMethod%22%3Anull%2C%22authLevel%22%3Anull%7D%2C%22id_token%22%3A%7B%22auth_time%22%3A%7B%22essential%22%3Atrue%7D%2C%22last_login%22%3Anull%7D%7D&bpcesta=%7B%22csid%22%3A%22a99c3728-431e-45d6-8f51-a64216dfe58c%22%2C%22typ_app%22%3A%22rest%22%2C%22enseigne%22%3A%22bp%22%2C%22typ_sp%22%3A%22out-band%22%2C%22typ_act%22%3A%22auth%22%2C%22snid%22%3A%22123456%22%2C%22cdetab%22%3A%2210207%22%2C%22typ_srv%22%3A%22part%22%2C%22phase%22%3A%221%22%7D
2020-03-28 16:17:48,007:WARNING:urllib3.connectionpool:2.1:connectionpool.py:744:urlopen Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, '[SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:1108)'))': /api/oauth/v2/authorize?nonce=59d09bff&scope=&response_type=id_token+token&response_mode=form_post&cdetab=10207&login_hint=anonymized&display=page&client_id=anonymized&claims=%7B%22userinfo%22%3A%7B%22cdetab%22%3Anull%2C%22authMethod%22%3Anull%2C%22authLevel%22%3Anull%7D%2C%22id_token%22%3A%7B%22auth_time%22%3A%7B%22essential%22%3Atrue%7D%2C%22last_login%22%3Anull%7D%7D&bpcesta=%7B%22csid%22%3A%22a99c3728-431e-45d6-8f51-a64216dfe58c%22%2C%22typ_app%22%3A%22rest%22%2C%22enseigne%22%3A%22bp%22%2C%22typ_sp%22%3A%22out-band%22%2C%22typ_act%22%3A%22auth%22%2C%22snid%22%3A%22123456%22%2C%22cdetab%22%3A%2210207%22%2C%22typ_srv%22%3A%22part%22%2C%22phase%22%3A%221%22%7D
Bug(banquepopulaire): HTTPSConnectionPool(host='www.as-ex-ath-groupe.banquepopulaire.fr', port=443): Max retries exceeded with url: /api/oauth/v2/authorize?nonce=59d09bff&scope=&response_type=id_token+token&response_mode=form_post&cdetab=10207&login_hint=anonymized&display=page&client_id=anonymized&claims=%7B%22userinfo%22%3A%7B%22cdetab%22%3Anull%2C%22authMethod%22%3Anull%2C%22authLevel%22%3Anull%7D%2C%22id_token%22%3A%7B%22auth_time%22%3A%7B%22essential%22%3Atrue%7D%2C%22last_login%22%3Anull%7D%7D&bpcesta=%7B%22csid%22%3A%22a99c3728-431e-45d6-8f51-a64216dfe58c%22%2C%22typ_app%22%3A%22rest%22%2C%22enseigne%22%3A%22bp%22%2C%22typ_sp%22%3A%22out-band%22%2C%22typ_act%22%3A%22auth%22%2C%22snid%22%3A%22123456%22%2C%22cdetab%22%3A%2210207%22%2C%22typ_srv%22%3A%22part%22%2C%22phase%22%3A%221%22%7D (Caused by SSLError(SSLError(1, '[SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:1108)')))
I was using the version 2.0 from pypi, but I just tested with git repository and the output is the same.
A pip freeze
in a fresh virtualenv gives:
appdirs==1.4.3
Babel==2.8.0
CacheControl==0.12.6
certifi==2019.11.28
chardet==3.0.4
colorama==0.4.3
contextlib2==0.6.0
cssselect==1.1.0
distlib==0.3.0
distro==1.4.0
html2text==2020.1.16
html5lib==1.0.1
idna==2.8
lockfile==0.12.2
lxml==4.5.0
msgpack==0.6.2
packaging==20.1
pep517==0.7.0
Pillow==7.0.0
pkg-resources==0.0.0
progress==1.5
pyparsing==2.4.6
python-dateutil==2.8.1
pytoml==0.1.21
pytz==2019.3
PyYAML==5.3.1
requests==2.22.0
retrying==1.3.3
six==1.14.0
Unidecode==1.1.1
urllib3==1.25.8
webencodings==0.5.1
weboob==2.1
As the error may be related to openssl, the version of the openssl package from Debian Sid is 1.1.1e-1 (and I get the same error with the version 1.1.1d-0+deb10u2 from Debian Stable).
Thanks