Blender ID Authentication fails due to lack of SSL module #56275
Labels
No Label
Interest
Animation & Rigging
Interest
Blender Cloud
Interest
Collada
Interest
Core
Interest
Documentation
Interest
Eevee & Viewport
Interest
Geometry Nodes
Interest
Grease Pencil
Interest
Import and Export
Interest
Modeling
Interest
Modifiers
Interest
Nodes & Physics
Interest
Pipeline, Assets & IO
Interest
Platforms, Builds, Tests & Devices
Interest
Python API
Interest
Rendering & Cycles
Interest
Sculpt, Paint & Texture
Interest
Translations
Interest
User Interface
Interest
UV Editing
Interest
VFX & Video
Meta
Good First Issue
Meta
Papercut
Module
Add-ons (BF-Blender)
Module
Add-ons (Community)
Platform
Linux
Platform
macOS
Platform
Windows
Priority
High
Priority
Low
Priority
Normal
Priority
Unbreak Now!
Status
Archived
Status
Confirmed
Status
Duplicate
Status
Needs Info from Developers
Status
Needs Information from User
Status
Needs Triage
Status
Resolved
Type
Bug
Type
Design
Type
Known Issue
Type
Patch
Type
Report
Type
To Do
No Milestone
No project
No Assignees
4 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: blender/blender-addons#56275
Loading…
Reference in New Issue
No description provided.
Delete Branch "%!s(<nil>)"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
System Information
MacOS X High Sierra 10.13.6 (17G2208), Brand new MacBook Pro 2018 15".
Blender Version
Broken: Version 2.79 (2.79 2018-08-08, Blender Foundation)
Short description of error
Trying to login using the Blender ID Authenticatiion builtin plugin fails.
Exact steps for others to reproduce the error
Type in email and password into dialog in user preferences->plugins->System: Blender ID authentication, click Login and get error:
Exception POSTing to https://www.blender.org/id/u/identify. ... Caused by SSL error ("Can't connect to HTTPS because the SSL module is not available."))
Added subscriber: @ChuckOcheret
This apprently is an issue in a daily build. Please provide the exact link you used to download Blender, so that we can test with th exact same version.
I got the lates Mac version from https://builder.blender.org/download dated Aug 8, 2018. The link in this page has changed to Aug 9 by now.
I downloaded the 2.79 build just now https:builder.blender.org/downloadblender-2.79-c19ddcc975f-OSX-10.9-x86_64.zip, which appears to be the Aug 10 build. I had slightly different symptoms today, which make me a little more nervous.
What I did:
This concerns me even more than the original problem because it says that I am logged in already so it could represent a serious security flaw. If the SSL module is not available due to a build problem but authentication is still proceeding then it is possible that credentials are being exchanged over the internet without encryption. My hope is that this is not the case and merely the build problem combined with an erroneous UI logged in status being displayed.
I suggest escalating this issue until you can at least verify that there is no security issue. But a working 2.79 build for Macs w/ the cloud plugin working would be greatly appreciated. It is one of the few things we have to pay for. ;-)
This is still a problem in today's build and it exhibits the same security issue I reported yesterday. Please check today's Mac build at https:builder.blender.org/downloadblender-2.79-a9700e7ad27-OSX-10.9-x86_64.zip.
There is no security issue. It's probably a configuration mistake on the Mac buildbot that causes it to miss a library.
It's working with the official releases. Of course we appreciate the feedback about the daily builds, but we cannot guarantee that things keep working there. They even come with a warning 'These builds are not as stable as releases, use at your own risk', so claiming that you're paying for those is a bit far-fetched.
Added subscriber: @fsiddi
@fsiddi could you take a look at this at some point with your macOS-powers?
@ChuckOcheret please don't change the priority of issues; that's done by module owners.
@dr.sybren Sorry about change the priority. Given that there might be a security issue (as described above on Aug 14) I felt it should be escalated. The problem persists today with the latest Mac build at builder.blender.org - https:builder.blender.org/downloadblender-2.79-eebc292b424-OSX-10.9-x86_64.zip. I recall that this problem has recurred multiple times in the past with various Python modules not being available, including the SSL module.
Missing a library is not a security issue. The add-on refuses to communicate without SSL, so nothing is leaked.
I noticed that this may be related to another tracked issue - https://developer.blender.org/T54506 (Not sure if there's a better way to refer to it). Glad it isn't an explicit security issue despite the erroneous logged-in status. It is quite a painful problem for me at the moment because I have 3 classes w/ 90 students trying to wrap up Summer work and use the new Principled Hair BSDF and we depend on SSL for a number of plug-ins including our render farm setup.
I would really recommend against using daily builds for anything this important. We'll try to get this fixed soon, but please, in the future, don't rely on unstable daily builds when you're responsible for your students.
Is there anyway to get someone to address this? This problem with the Mac daily build has persisted for a while (I only reported it after it remained broken for a few weeks). I have built Blender on my Mac at home and it exhibits the same problem. Not having SSL working means no access to Blender Cloud from the daily build and breaks things like the SketchFab uploader, several cloud rendering frameworks, etc... Is it more than a build config issue?
Added subscriber: @LazyDodo
We're currently in the process of a library update, once this is finished this issue should be resolved, but you're gonna have to have a little bit more patience.
Arto Kitula is on it, see this bf-committers mail thread on the subject.
Sergey's mail Updating release/buildbot environment to Glibc-2.24 is also relevant for this.
Thanks! That email revealed a workaround for the problem. After installing the brew openssl with
it works now. Looking forward to the permanent fix. Great work, everyone!
Quick update... Interestingly the brew openssl appears to break a a number of things in MacOS so I had to back it out. In other words it isn't the best workaround for the problem. I just downloaded the daily build. I can't tell if this problem is still there because now the 'requests' module is missing from Python. This has been a problem in the past (I reported it for a production release a long time ago) but I haven't seen it in a while.
The console shows a bunch of errors like...
Added subscriber: @brecht
Changed status from 'Open' to: 'Resolved'
I added the missing requests module for the daily builds, and with the new bundled SSL version it all appears to be working now.