Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!newsfeed0.kamp.net!newsfeed.kamp.net!feeder1.cambriumusenet.nl!feed.tweaknews.nl!85.12.40.139.MISMATCH!xlned.com!feeder7.xlned.com!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.015 X-Spam-Evidence: '*H*': 0.97; '*S*': 0.00; 'importing': 0.05; 'imported': 0.09; 'python': 0.11; '.py': 0.16; 'sha1': 0.16; 'ssl,': 0.16; 'subject:broken': 0.16; 'underlying': 0.16; 'wrote:': 0.18; 'library': 0.18; 'module': 0.19; 'else,': 0.19; 'thu,': 0.19; 'to:name:python-list@python.org': 0.22; 'somewhere': 0.26; 'header:In-Reply-To:1': 0.27; 'chris': 0.29; 'am,': 0.29; 'message-id:@mail.gmail.com': 0.30; 'code': 0.31; "d'aprano": 0.31; 'sep': 0.31; 'steven': 0.31; 'probably': 0.32; 'fri,': 0.33; 'actual': 0.34; 'updated': 0.34; 'maybe': 0.34; 'problem': 0.35; 'something': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'there': 0.35; 'error.': 0.37; 'needed': 0.38; 'to:addr:python- list': 0.38; 'files': 0.38; 'expect': 0.39; 'to:addr:python.org': 0.39; 'more': 0.64; 'old,': 0.85; 'absolutely': 0.87 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=/OTaCR2c12GZxcVf2Yv1SLvhAZZ5t6FF2M+dSMUanGg=; b=C0TLtXFUUzTJfz4sCfUgVEeHq5S9CvZPszJk5sKN3SyBu7NqyQ0WwlBwsq9UqG5Bi0 NctbAhrxDqTvwg6sHmAXyPoGX+/PWew4PnN3GnujRSwZcpdMlAlswU6zdWTyG3txbdkm JAJHGxWMYVkHxAFGLRHRojZre+HIXvs9q6NlQyk6HplKr4rflUmVqj4xhJLdaJfN4BMG xDPGEbU/bqdeiGMNjV3kn4btf5bj26lX2SqbtBWUY1bn4NMfxdt0mAw1K3jZxGtqpfir nCRlembSyw/Eo2PLnZy2/SkPf9She+iMcKF+TsU60s433iBx1PwIyfH6VT1gGAnSPTSC mTFQ== MIME-Version: 1.0 X-Received: by 10.194.232.232 with SMTP id tr8mr6820206wjc.21.1411068204443; Thu, 18 Sep 2014 12:23:24 -0700 (PDT) In-Reply-To: References: <541b1158$0$29967$c3e8da3$5496439d@news.astraweb.com> Date: Thu, 18 Sep 2014 13:23:24 -0600 Subject: Re: hashlib suddenly broken From: Larry Martell To: "python-list@python.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 15 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1411068206 news.xs4all.nl 2968 [2001:888:2000:d::a6]:34602 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:78039 On Thu, Sep 18, 2014 at 11:18 AM, Chris Angelico wrote: > On Fri, Sep 19, 2014 at 3:07 AM, Steven D'Aprano > wrote: >> but I expect that's probably not where the problem lies. My *wild guess* is >> that your system updated SSL, and removed some underlying SHA-1 library >> needed by hashlib. SHA-1 is pretty old, and there is now a known attack on >> it, so some over-zealous security update may have removed it. > > Or, more likely, the actual code for sha1 is imported from somewhere > else, and *that* module is what's been shadowed. What happens if you > change directory to something with absolutely no .py files in it, then > start interactive Python and try importing hashlib? Maybe you have an > openssl.py or something. I still get the same error.