[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] - httpx==0.28.1 #3475

Activity

1. neonima1995

   changed the title [-]httpx==0.28.1[/-] [+][SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] - httpx==0.28.1[/+] on Jan 15, 2025
2. petsneakers commented on Feb 13, 2025

   

   petsneakers

   on Feb 13, 2025

   More actions

   Also impacted by this, calling

   httpx.AsyncClient(verify=False, http2=True)
   
3. Cycloctane commented on Feb 16, 2025

   

   Cycloctane

   on Feb 16, 2025

   Last edited by Cycloctane

   More actions

   There is a breaking change in ssl config. httpx 0.27.2 uses a custom cipher suites config from urllib3 1.x, while httpx 0.28.0 is using default ciphers from ssl.create_default_context(). Some cipher suites are not accepted by default anymore.

   👍React with 👍3Reacted by Pet Sneakers, acefei and Yaroslav Sklabinskyi
4. petsneakers commented on Feb 16, 2025

   

   petsneakers

   on Feb 16, 2025

   Last edited by petsneakers

   More actions

   Thanks, that did it:

   ssl_context = ssl.create_default_context()
   ssl_context.check_hostname = False
   ssl_context.verify_mode = ssl.CERT_NONE
   ssl_context.set_ciphers('DEFAULT@SECLEVEL=2')
   async with httpx.AsyncClient(verify=ssl_context, http2=True) as client:
   
5. bellini666 commented on May 5, 2025

   

   bellini666

   on May 5, 2025

   More actions

   Same issue even without http2

   @petsneakers workaround works, but verify=False does not