emsdk install failing

[Krelborn]

I am trying to update my emsdk installation and getting the following error after running ./emsdk install latest.

Installing tool 'emscripten-1.37.34'..
Error downloading URL 'https://github.com/kripken/emscripten/archive/1.37.34.tar.gz': <urlopen error [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:590)>
Installation failed!

I'm seeing this whether I try to upgrade an existing installation or install from a clean copy of the SDK. Platform is macOS. I tried to install 1.37.33 as well and that failed with the same error. Is anyone else seeing this problem?

[frittblas]

Yes I have the same problem but with emscripten-1.37.35
Error downloading..
I'm on windows.

[jjyyxx]

Similar problem.
Platform: windows
Error downloading URL 'https://github.com/kripken/emscripten/archive/1.37.35.zip': <urlopen error [Errno 1] _ssl.c:504: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version>

However, i was able to download the archive manually from the browser. Is there a way to bypass the download stage(maybe put the archive to a specific directory manually) and install directly?

[LMLB]

@jjyyxx Put the zip in the zips folder and make sure it has the same file name as in the URL (i.e. 1.37.35.zip, not emscripten-1.37.35.zip). Then run the install command again and it will detect that the zip file is already downloaded.

[Krelborn]

That's a good workaround, thanks!

[jjyyxx]

Thanks. It works perfectly

[LMLB]

This seems to have been caused by https://github.com/blog/2507-weak-cryptographic-standards-removed. The version of Python included in the Windows build is too old.

Edit: It's because of the included version of OpenSSL is too old (i.e. less than 1.0.1).

[kripken]

Sounds like we need to update the Python in the windows emsdk, but is this windows-only? The initial report here was on Mac.

[Krelborn]

Yep I’m seeing this on macOS 10.12 and 10.13.

[kripken]

Is the core issue the same, do those MacOS versions ship with too-old versions of python?

[Krelborn]

Python version is 2.7.10 on both macOS versions I've tried, I guess that must be too old if that's the issue.

[mapsam]

Just updated to MacOS 10.13.3 and the install latest command worked!

Adding some things I saw, which may or may not be helpful. tlsv1 alert protocol version error searches reveal mostly python and openssl issues. I noticed before the MacOS upgrade I was running openssl 0.9.8 but now I'm running LibreSSL 2.2.7.

[frittblas]

kripken - yes it's an issue on windows too. I also got this error when trying to compile a project that worked fine in 1.35.00

urllib2.URLError: <urlopen error [Errno 1] _ssl.c:504: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version>

[LMLB]

Sorry, I missed that it was originally reported on macOS, as I had the same issue on Windows.

It's actually the version of OpenSSL that's too old (version 1.0.1 or higher is needed for TLS 1.2). Python 2.7.5 for Windows includes OpenSSL 0.9.8y, and macOS 10.13.3 includes OpenSSL 0.9.8zh.

[Krelborn]

Yep, I've retried on macOS 10.13 and it does seem to work so it's just 10.12 where I have the problem (Which is my main development machine). I'll use the workaround that was posted until I get round to upgrading. Thanks for the responses!