ussl.wrap_socket results in OSError: [Errno -1] ERR_MEM

Daniel Lehmann

Hi all,
I'm stuck on a problem which does not occur in python on PC:

import ussl, socket
s=socket.socket()
s.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR,1)
s.bind(('0.0.0.0',443))
s.listen(16)
conn, addr = s.accept()

gives the follwowing output with curl:

daniel@trias:~$ curl -v -k https://192.168.4.1
* Expire in 0 ms for 6 (transfer 0x55aafe83ff30)
*   Trying 192.168.4.1...
* TCP_NODELAY set
* Expire in 200 ms for 4 (transfer 0x55aafe83ff30)
* Connected to 192.168.4.1 (192.168.4.1) port 443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /home/daniel/anaconda3/ssl/cacert.pem
  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):

That looks good. However, if I continue to wrap the connection into ssl, the handshake is done, but after that the error is given:

sslconn = ussl.wrap_socket(conn, server_side = True, keyfile = '/flash/cert/device.key', certfile = '/flash/cert/device.crt')
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
OSError: [Errno -1] ERR_MEM

curl continues:

* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd; CN=192.168.4.1
*  start date: Oct 10 12:24:08 2019 GMT
*  expire date: Dec 14 12:24:08 2038 GMT
*  issuer: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd
*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
> GET / HTTP/1.1
> Host: 192.168.4.1
> User-Agent: curl/7.64.0
> Accept: */*

Someone else seems to have no issues with this when he modified microWebSrv accordingly:
microWebSrv - HTTPS and WSS support #55
So it seems to be WiPy related.

Here some additional info and input for easy reconstruction:

>>> os.uname()
(sysname='WiPy', nodename='WiPy', release='1.20.1.r1', version='3138a13d on 2019-10-08', machine='WiPy with ESP32')

device.crt:

device.key:

Explore Pybytes | Official Documentation | Report a Firmware Bug/Issue | GitHub

ussl.wrap_socket results in OSError: [Errno -1] ERR_MEM

Pycom on Twitter