avn CLI fails with SSLV3_ALERT_BAD_RECORD_MAC on a fresh Mac

After pip install aiven-client on a Mac, avn project list fails with SSLError(SSLError(1, '[SSL: SSLV3_ALERT_BAD_RECORD_MAC] sslv3 alert bad record mac ...')). It is caused by macOS's system Python being linked against LibreSSL instead of OpenSSL. The system Python is frozen at 3.9.6 on recent macOS (Sonoma, Sequoia, Tahoe), so it cannot be fixed in place.

Install Python yourself from Homebrew or python.org (both ship Python linked against OpenSSL, not LibreSSL) and reinstall aiven-client: brew install openssl, brew reinstall python, then pip3 install aiven-client. aiven-client now requires Python 3.10+, so system Python is unsupported anyway. certifi is a hard dependency for a consistent CA bundle. Source: https://github.com/aiven/aiven-client/issues/262

Source: https://github.com/aiven/aiven-client/issues/262