Error when connecting to Firewall : SSLV3_ALERT_HANDSHAKE_FAILURE

[01xR4in]

Hey, I was working on a simple script to automate some tasks on an infrastructure, and I just found a case where I can't connect to a firewall.

Here is the error message I'm getting :
Max retries exceeded with url: /auth/admin.html (Caused by SSLError(SSLError(1, '[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1028)')))

It seems like it's only happening when starting the script on a Windows machine, as I tried on a linux VM and didn't got any similar error.

I'm currently using:

Python 3.13.3
stormshield.sns.sslclient 1.1.0

Here is the steps you can do to mimic the error :

PS C:\FakePath\> python3 -m venv venv
PS C:\FakePath\> .\venv\Scripts\Activate.ps1
(venv) PS C:\FakePath\> pip3 install -r .\requirements.txt
(venv) PS C:\FakePath\> python main.py

Here is the content of the requirements.txt file:

stormshield.sns.sslclient == 1.1.0

Here is the main.py file:

from stormshield.sns.sslclient import SSLClient 

user = "admin"
password = "REDACTED"

host = "XXX.XXX.XXX.XX"
port = "XXX"

try:
    client = SSLClient(host=host, port=port,
        user=user, password=password,
        sslverifyhost=False, sslverifypeer=False, 
        timeout=10)    
    print(f"Connection to {host} successfull!")
except Exception as err:
    print(f"Error while trying to connect to {host}:{port} : {err}")
    exit(1)

try:
    client.disconnect()
    print("Client Disconnected Successfully !")
except Exception as err:
    print(f"Error while disconnecting from {host} : {err}")
    exit(1)

This looks a lot like this issue here : #4 but it seems like the issue was closed while the problem not solved, hence why I'm opening this one.

I will look at it more in details to bring more informations about this error, but as I'm not a good python dev, any help is welcome.

[remip2]

Hi, I can't reproduce with python3.13 and windows 11.

Do you have a custom certificate ? May be this certificate doesn't meet the new minimum requirements of the new openssl version shipped with python 3.13 ?