[Python-apps-team] Bug#813313: [planet-venus] planet-venus fails on SNI enabled websites

[Ingo Juergensmann]

Package: planet-venus
Version: 0~git9de2109-3
Severity: normal

--- Please enter the report below this line. ---

Apparently planet-venus fails to fetch feeds from SNI enabled hosts.
After migrating my blog from HTTP to HTTPS with letsencrypt.org
certificate, I noticed that Planet Debian fails to include my blog
postings.

When following https://wiki.debian.org/PlanetDebian "Testing changes to
the config/templates" I noticed this error:

ij at debian:~/planet$ grep blog.windfluechter log/planet.log.0
INFO:planet.runner:Fetching
https://blog.windfluechter.net/taxonomy/term/2/feed via 5
ERROR:planet.runner:HttpLib2Error: Server presented certificate that
does not match host blog.windfluechter.net: {'subjectAltName': (('DNS',
'abi94oesede.de'), ('DNS', 'www.abi94oesede.de')), 'notBefore': u'Jan 26
18:05:00 2016 GMT', 'caIssuers':
(u'http://cert.int-x1.letsencrypt.org/',), 'OCSP':
(u'http://ocsp.int-x1.letsencrypt.org/',), 'serialNumber':
u'01839A051BF9D2873C0A3BAA9FD0227C54D1', 'notAfter': 'Apr 25 18:05:00
2016 GMT', 'version': 3L, 'subject': ((('commonName',
u'abi94oesede.de'),),), 'issuer': ((('countryName', u'US'),),
(('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's
Encrypt Authority X1"),))} via 5
ERROR:planet.runner:Error 500 while updating feed
https://blog.windfluechter.net/taxonomy/term/2/feed

When directly using my feed link in a browser everything works without
any problems and the correct certificate is loaded.

Grepping through my planet.log reveals that I might not be the only one
experiencing this kind of problems:

ij at debian:~/planet$ grep "Error 500" log/planet.log.0 | grep -c https
9

PS: I've tested this on Debian stable, but another DD has been
confirming that this happens on unstable as well.

--- System information. ---
Architecture: amd64
Kernel:       Linux 4.3.0-1-amd64

Debian Release: stretch/sid
  500 unstable        www.deb-multimedia.org
  500 unstable        ftp.de.debian.org

--- Package information. ---
Package's Depends field is empty.

Package's Recommends field is empty.

Package's Suggests field is empty.




-- 
Ciao...            //      Fon: 0381-2744150
      Ingo       \X/       http://blog.windfluechter.net
Please don't share this address with Facebook or Google!
gpg pubkey: http://www.juergensmann.de/ij_public_key.asc