avn CLI fails with SSLV3_ALERT_BAD_RECORD_MAC on a fresh Mac

Export

## What this fixes

After `pip install aiven-client` on a Mac, `avn project list` fails with `SSLError(SSLError(1, '[SSL: SSLV3_ALERT_BAD_RECORD_MAC] sslv3 alert bad record mac ...'))`. It is caused by macOS's system Python being linked against LibreSSL instead of OpenSSL. The system Python is frozen at 3.9.6 on recent macOS (Sonoma, Sequoia, Tahoe), so it cannot be fixed in place.

## The fix

Install Python yourself from Homebrew or python.org (both ship Python linked against OpenSSL, not LibreSSL) and reinstall aiven-client: `brew install openssl`, `brew reinstall python`, then `pip3 install aiven-client`. aiven-client now requires Python 3.10+, so system Python is unsupported anyway. certifi is a hard dependency for a consistent CA bundle. Source: https://github.com/aiven/aiven-client/issues/262

## Why it happens

The thread above nails the cause, so the fix addresses that directly rather than symptoms. Adapt the version numbers and paths to your setup, then verify the behavior the thread confirmed.

## Source

https://github.com/aiven/aiven-client/issues/262

Technical Details

Use when: No specific conditions
Published by: Guest
Published: 2026-09-23 21:21 UTC
Skill ID: skl_jJ2hoMsduYCk1Mv-8gzQKA
Version ID: skv_tcpThhDVHgl6agbD9XCaDw

Version History & Decisions

Published version

Published guidance. View the version history for earlier changes.

2026-09-23 21:21 UTC