Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!weretis.net!feeder4.news.weretis.net!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.009
X-Spam-Evidence: '*H*': 0.98; '*S*': 0.00; 'importing': 0.05; 'imported': 0.09; 'cc:addr:python-list': 0.11; 'python': 0.11; '.py': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'sha1': 0.16; 'ssl,': 0.16; 'subject:broken': 0.16; 'underlying': 0.16; 'wrote:': 0.18; 'library': 0.18; 'module': 0.19; 'else,': 0.19; 'cc:addr:python.org': 0.22; 'cc:2**0': 0.24; 'somewhere': 0.26; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; 'message-id:@mail.gmail.com': 0.30; 'code': 0.31; "d'aprano": 0.31; 'sep': 0.31; 'steven': 0.31; 'probably': 0.32; 'fri,': 0.33; 'actual': 0.34; 'updated': 0.34; 'maybe': 0.34; 'problem': 0.35; 'something': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'there': 0.35; 'needed': 0.38; 'files': 0.38; 'expect': 0.39; 'more': 0.64; 'old,': 0.85; 'absolutely': 0.87; 'to:none': 0.92
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type; bh=MAayQRU42Vcb9Ba7TInS5U0LVbMG/+anXJzr03dyl9g=; b=X0sdmZn6ji6P6ZST17iBbS1qNkNiGsPd1m2ZMHIMSVqXPi+Jfoq2z26T3kdNL5zw6V tAWkSwjKsKeuIGxGDUFThpMNPmFJWJLr0tB+7hWejurof5tXdWll/Vg5b1p7wyUs8Oqx 50p/gDLqobyikyaqpbgDyMvqH7/PZcPO5TPbCveqIWycDTree/8rHs9BcTNdcu4SvEqs r/PzhaJXMPddKkmpAT1cXaPHEiP4tqxnsZcOgyTAox+QUz4BqqWwm1ZWbgHadpAH6oJM rL4sDt5chLHRq4osvrGAxkTASXDNSb0TMvavbTMIk7V6WKD/V6cEvYv/hSS6RLrWxdyt 68Mw==
MIME-Version: 1.0
X-Received: by 10.51.17.2 with SMTP id ga2mr1282757igd.2.1411060682177; Thu, 18 Sep 2014 10:18:02 -0700 (PDT)
In-Reply-To: <541b1158$0$29967$c3e8da3$5496439d@news.astraweb.com>
References: <mailman.14109.1411057681.18130.python-list@python.org> <541b1158$0$29967$c3e8da3$5496439d@news.astraweb.com>
Date: Fri, 19 Sep 2014 03:18:02 +1000
Subject: Re: hashlib suddenly broken
From: Chris Angelico <rosuav@gmail.com>
Cc: "python-list@python.org" <python-list@python.org>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.14113.1411060686.18130.python-list@python.org>
Lines: 14
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1411060686 news.xs4all.nl 2831 [2001:888:2000:d::a6]:52667
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:78030

On Fri, Sep 19, 2014 at 3:07 AM, Steven D'Aprano
<steve+comp.lang.python@pearwood.info> wrote:
> but I expect that's probably not where the problem lies. My *wild guess* is
> that your system updated SSL, and removed some underlying SHA-1 library
> needed by hashlib. SHA-1 is pretty old, and there is now a known attack on
> it, so some over-zealous security update may have removed it.

Or, more likely, the actual code for sha1 is imported from somewhere
else, and *that* module is what's been shadowed. What happens if you
change directory to something with absolutely no .py files in it, then
start interactive Python and try importing hashlib? Maybe you have an
openssl.py or something.

ChrisA