SAB SSL SSL_SESSION_ID_CALLBACK_FAILED [Debian]

Get help with all aspects of SABnzbd
Forum rules
Help us help you:
  • Are you using the latest stable version of SABnzbd? Downloads page.
  • Tell us what system you run SABnzbd on.
  • Adhere to the forum rules.
  • Do you experience problems during downloading?
    Check your connection in Status and Interface settings window.
    Use Test Server in Config > Servers.
    We will probably ask you to do a test using only basic settings.
  • Do you experience problems during repair or unpacking?
    Enable +Debug logging in the Status and Interface settings window and share the relevant parts of the log here using [ code ] sections.
Post Reply
alanspa
Newbie
Newbie
Posts: 17
Joined: October 30th, 2012, 1:15 am

SAB SSL SSL_SESSION_ID_CALLBACK_FAILED [Debian]

Post by alanspa »

Recently I have noticed SAB throwing out an error. Details are:

Code: Select all

ENGINE Error in HTTPServer.tick
Traceback (most recent call last):
  File "/usr/share/sabnzbdplus/cherrypy/wsgiserver/__init__.py", line 2025, in start
    self.tick()
  File "/usr/share/sabnzbdplus/cherrypy/wsgiserver/__init__.py", line 2092, in tick
    s, ssl_env = self.ssl_adapter.wrap(s)
  File "/usr/share/sabnzbdplus/cherrypy/wsgiserver/ssl_builtin.py", line 67, in wrap
    server_side=True)
  File "/usr/lib/python2.7/ssl.py", line 363, in wrap_socket
    _context=self)
  File "/usr/lib/python2.7/ssl.py", line 611, in __init__
    self.do_handshake()
  File "/usr/lib/python2.7/ssl.py", line 840, in do_handshake
    self._sslobj.do_handshake()
SSLError: [SSL: SSL_SESSION_ID_CALLBACK_FAILED] ssl session id callback failed (_ssl.c:661)
I have been using SAB for some time now, and cannot tie this error to anything specific that has happened. After a service restart all is OK for a few days. Then the error pops up again. Anyone seen this before?
I am running SAB on Debian 9, and use a LetsEncrypt.org certificate.
User avatar
sander
Release Testers
Release Testers
Posts: 8811
Joined: January 22nd, 2008, 2:22 pm

Re: SAB SSL related error [Debian]

Post by sander »

Which version of SABnzbd / sabnzbdplus?
alanspa
Newbie
Newbie
Posts: 17
Joined: October 30th, 2012, 1:15 am

Re: SAB SSL related error [Debian]

Post by alanspa »

I'm running SAB 2.3.4.
Python: 2.7.13
OpenSSL: OpenSSL 1.1.0f
User avatar
sander
Release Testers
Release Testers
Posts: 8811
Joined: January 22nd, 2008, 2:22 pm

Re: SSL: SSL_SESSION_ID_CALLBACK_FAILED [Debian]

Post by sander »

Can you reproduce it?

Did you Google "SSL: SSL_SESSION_ID_CALLBACK_FAILED"? Anything interesting? For example https://stackoverflow.com/questions/105 ... id-callbac and http://eavesdrop.openstack.org/irclogs/ ... 6.log.html ?

The error is unknown to me and the SAB forum, so my guess is as good as your's
alanspa
Newbie
Newbie
Posts: 17
Joined: October 30th, 2012, 1:15 am

Re: SAB SSL SSL_SESSION_ID_CALLBACK_FAILED [Debian]

Post by alanspa »

When this occurs, and I click on the SAB config cog I get the following error on the config page:
"Secure (SSL) connections from SABnzbd to newsservers and HTTPS websites will be encrypted, however, validating a server's identity using its certificates is not possible. Python 2.7.9 or above, OpenSSL 1.0.2 or above and up-to-date local CA certificates are required."

I am running Python 2.7.13 and OpenSSL 1.1.0f.

I issued new certs from LetsEncrypt.org using a 4096 bit private key (I was using 2048 previously). I now do not get the error from within SAB, but SAB still suffers from the same symptoms. After a service restart all is well again.
alanspa
Newbie
Newbie
Posts: 17
Joined: October 30th, 2012, 1:15 am

Re: SSL: SSL_SESSION_ID_CALLBACK_FAILED [Debian]

Post by alanspa »

sander wrote: August 16th, 2018, 1:38 pm Can you reproduce it?

Did you Google "SSL: SSL_SESSION_ID_CALLBACK_FAILED"? Anything interesting? For example https://stackoverflow.com/questions/105 ... id-callbac and http://eavesdrop.openstack.org/irclogs/ ... 6.log.html ?

The error is unknown to me and the SAB forum, so my guess is as good as your's
I am unable to reproduce the problem. It unfortunately just happens at random.
I had a look at the links posted, and have searched online. But I guess I am not savvy enough to understand what the articles are implying I should change, and am yet to find a fix.
Post Reply