TLS1.0 and TLS1.1 is not supporting on Salt version 3006.7 and above

[Naga Karthi Subramanian]

Hi There,

I'm trying to connect to our cisco nexus devices with napalm nxapi proxy. I do get the following error on after accepting the key.

Traceback (most recent call last):
  File "/opt/saltstack/salt/extras-3.10/urllib3/connectionpool.py", line 670, in urlopen
    httplib_response = self._make_request(
  File "/opt/saltstack/salt/extras-3.10/urllib3/connectionpool.py", line 381, in _make_request
    self._validate_conn(conn)
  File "/opt/saltstack/salt/extras-3.10/urllib3/connectionpool.py", line 978, in _validate_conn
    conn.connect()
  File "/opt/saltstack/salt/extras-3.10/urllib3/connection.py", line 362, in connect
    self.sock = ssl_wrap_socket(
  File "/opt/saltstack/salt/extras-3.10/urllib3/util/ssl_.py", line 386, in ssl_wrap_socket
    return context.wrap_socket(sock, server_hostname=server_hostname)
  File "/opt/saltstack/salt/lib/python3.10/ssl.py", line 513, in wrap_socket
    return self.sslsocket_class._create(
  File "/opt/saltstack/salt/lib/python3.10/ssl.py", line 1104, in _create
    self.do_handshake()
  File "/opt/saltstack/salt/lib/python3.10/ssl.py", line 1375, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:1007)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/saltstack/salt/lib/python3.10/site-packages/requests/adapters.py", line 486, in send
    resp = conn.urlopen(
  File "/opt/saltstack/salt/extras-3.10/urllib3/connectionpool.py", line 726, in urlopen
    retries = retries.increment(
  File "/opt/saltstack/salt/extras-3.10/urllib3/util/retry.py", line 446, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='mydevice.mydomain.com', port=4000): Max retries exceeded with url: /ins (Caused by SSLError(SSLError(1, '[SSL: UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:1007)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/saltstack/salt/extras-3.10/napalm/nxapi_plumbing/api_client.py", line 96, in _send_request
    response = requests.post(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/requests/api.py", line 115, in post
    return request("post", url, data=data, json=json, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/requests/api.py", line 59, in request
    return session.request(method=method, url=url, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/requests/sessions.py", line 589, in request
    resp = self.send(prep, **send_kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/requests/sessions.py", line 703, in send
    r = adapter.send(request, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/requests/adapters.py", line 517, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='mydevice.mydomain.com', port=4000): Max retries exceeded with url: /ins (Caused by SSLError(SSLError(1, '[SSL: UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:1007)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/saltstack/salt/extras-3.10/napalm/nxos/nxos.py", line 824, in open
    self._send_command("show hostname")
  File "/opt/saltstack/salt/extras-3.10/napalm/nxos/nxos.py", line 841, in _send_command
    return self.device.show(command, raw_text=raw_text)
  File "/opt/saltstack/salt/extras-3.10/napalm/nxapi_plumbing/device.py", line 70, in show
    result = self.show_list(commands, raw_text)
  File "/opt/saltstack/salt/extras-3.10/napalm/nxapi_plumbing/device.py", line 98, in show_list
    return self.api._nxapi_command(commands, method=cmd_method)
  File "/opt/saltstack/salt/extras-3.10/napalm/nxapi_plumbing/api_client.py", line 137, in _nxapi_command
    response = self._send_request(commands, method=method)
  File "/opt/saltstack/salt/extras-3.10/napalm/nxapi_plumbing/api_client.py", line 105, in _send_request
    raise NXAPIConnectionError(str(e))
napalm.nxapi_plumbing.errors.NXAPIConnectionError: HTTPSConnectionPool(host='mydevice.mydomain.com', port=4000): Max retries exceeded with url: /ins (Caused by SSLError(SSLError(1, '[SSL: UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:1007)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/napalm.py", line 336, in get_device
    network_device.get("DRIVER").open()
  File "/opt/saltstack/salt/extras-3.10/napalm/nxos/nxos.py", line 827, in open
    raise ConnectionException("Cannot connect to {}".format(self.hostname))
napalm.base.exceptions.ConnectionException: Cannot connect to mydevice.mydomain.com

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/minion.py", line 1147, in _connect_minion
    await minion.connect_master(failed=failed)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/tornado/gen.py", line 780, in run
    yielded = self.gen.throw(exc)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/minion.py", line 1405, in connect_master
    yield self._post_master_init(master)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/tornado/gen.py", line 767, in run
    value = future.result()
  File "/opt/saltstack/salt/lib/python3.10/site-packages/tornado/gen.py", line 780, in run
    yielded = self.gen.throw(exc)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/minion.py", line 3893, in _post_master_init
    yield mp_call(self, master)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/tornado/gen.py", line 767, in run
    value = future.result()
  File "/opt/saltstack/salt/lib/python3.10/site-packages/tornado/gen.py", line 786, in run
    yielded = self.gen.send(value)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/metaproxy/proxy.py", line 188, in post_master_init
    proxy_init_fn(self.opts)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 160, in __call__
    ret = self.loader.run(run_func, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1233, in run
    return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1248, in _run_as
    return _func_or_method(*args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/proxy/napalm.py", line 197, in init
    napalm_device = salt.utils.napalm.get_device(opts)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/napalm.py", line 353, in get_device
    raise napalm.base.exceptions.ConnectionException(base_err_msg)
napalm.base.exceptions.ConnectionException: Cannot connect to mydevice.mydomain.com:4000 as <USERNAME>.

Thanks,

Naga

This message and its attachments may contain legally privileged or confidential information. It is intended solely for the named addressee. If you are not the addressee indicated in this message (or responsible for delivery of the message to the addressee), you may not copy or deliver this message or its attachments to anyone. Rather, you should permanently delete this message and its attachments and kindly notify the sender by reply e-mail. Any content of this message and its attachments that does not relate to the official business of News Corporation or its subsidiaries must be taken not to have been sent or endorsed by any of them. No representation is made that this email or its attachments are without defect.