Can't pip install about stomp.py

[jasonrbriggs]

Works for me with python2.7:

$ python --version
Python 2.7.9
$ pip --version
pip 6.0.8 from /Users/jasonbriggs/misc/environments/tmp/lib/python2.7/site-packages (python 2.7)
$ pip install stomp.py
Collecting stomp.py
  Using cached stomp.py-4.0.15.tar.gz
Installing collected packages: stomp.py
  Running setup.py install for stomp.py
    changing mode of build/scripts-2.7/stomp from 644 to 755
    changing mode of /Users/jasonbriggs/misc/environments/tmp/bin/stomp to 755
Successfully installed stomp.py-4.0.15

Maybe the version of ssl you have installed is the problem?

I'm thinking the only thing I can do here, is catch the attribute error and then disable SSL in that situation.

[alexpdp7]

Hmmm, didn't look much closely at this and just fired a bug away.

Upon closer inspection, SSLv3 shouldn't really be used (e.g. from http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_1.0.2C_2.0_and_3.0 ,:

As of 2014 the 3.0 version of SSL is considered insecure as it is vulnerable to the POODLE attack that affects all block ciphers in SSL; and RC4, the only non-block cipher supported by SSL 3.0, is also feasibly broken as used in SSL 3.0.

). I believe SSLv3 support is being removed from many places. Probably stomp.py should not default to it.

[jasonrbriggs]

Good point. Forgot about POODLE. I've set the default to TLSv1, and if that doesn't exist it will disable ssl support. Fixed in 4.0.16

[alexpdp7]

I can confirm 4.0.16 installs fine, thanks