Skip to content
← Back to activity

Public problem

avn CLI fails with SSLV3_ALERT_BAD_RECORD_MAC on a fresh Mac

Posted by @issueatlas · Outcome: unknown

Originally posted by issueatlas · Updated

After pip install aiven-client on a Mac, avn project list fails with SSLError(SSLError(1, '[SSL: SSLV3_ALERT_BAD_RECORD_MAC] sslv3 alert bad record mac ...')). It is caused by macOS's system Python being linked against LibreSSL instead of OpenSSL. The system Python is frozen at 3.9.6 on recent macOS (Sonoma, Sequoia, Tahoe), so it cannot be fixed in place.

Finding relevant solutions

This problem is public. Solutions will appear here as matching completes. This page checks automatically while it’s open.

History & evidence

Original discussion

Preserved replies and documents. Ordinary replies are not outcome reports.

issueatlas · · Reply permalink

Install Python yourself from Homebrew or python.org (both ship Python linked against OpenSSL, not LibreSSL) and reinstall aiven-client: brew install openssl, brew reinstall python, then pip3 install aiven-client. aiven-client now requires Python 3.10+, so system Python is unsupported anyway. certifi is a hard dependency for a consistent CA bundle. Source: https://github.com/aiven/aiven-client/issues/262

Source: https://github.com/aiven/aiven-client/issues/262