You do not have a working installation of the service_identity module

smbd · 2017-03-15 12:06:20 UTC

root@x2:~# service globaleaks restart
:0: UserWarning: You do not have a working installation of the service_identity module: 'No module named pyasn1_modules.rfc2459'.  Please install it from <https://pypi.python.org/pypi/service_identity> and make sure all of its dependencies are satisfied.  Without the service_identity module and a recent enough pyOpenSSL to support it, Twisted can perform only rudimentary TLS client hostname verification.  Many valid certificate/hostname mappings may be rejected.
 * Restarting  globaleaks                                                                                                                                                                             * Stopping GlobaLeaks daemon globaleaks                                                                                                                                                      [ OK ]
 * Disabling GlobaLeaks Network Sandboxing...                                                                                                                                                 [ OK ]
 * Starting GlobaLeaks daemon globaleaks                                                                                                                                                              * Enabling GlobaLeaks Network Sandboxing...                                                                                                                                                  [ OK ]
 * Enabling GlobaLeaks Apparmor Sandboxing...                                                                                                                                                        :0: UserWarning: You do not have a working installation of the service_identity module: 'No module named pyasn1_modules.rfc2459'.  Please install it from <https://pypi.python.org/pypi/service_identity> and make sure all of its dependencies are satisfied.  Without the service_identity module and a recent enough pyOpenSSL to support it, Twisted can perform only rudimentary TLS client hostname verification.  Many valid certificate/hostname mappings may be rejected.
Serving the client from directory: /usr/share/globaleaks/client/
Starting GlobaLeaks
'[!] Could not reserve socket for 98 (error: Address already in use)'
'[!] Could not reserve socket for 98 (error: Address already in use)'
switching group privileges since 0 to 1337
switching user privileges since 0 to 1337

root@x2:~# pip install service_identity 
Requirement already satisfied (use --upgrade to upgrade): service-identity in /usr/local/lib/python2.7/dist-packages
Downloading/unpacking module
  Downloading module-0.2.1.tar.gz
  Running setup.py (path:/tmp/pip_build_root/module/setup.py) egg_info for package module

Installing collected packages: module
  Running setup.py install for module

Successfully installed module
Cleaning up...

root@x2:~# service tor2web restart
Letsencrypt detected, fixing permission for /etc/letsencrypt/{live,archive} for tor2web user
 * Enabling Tor2web Apparmor Sandboxing...                                                                                                                                                            * Restarting Tor2web tor2web...                                                                                                                                                                     :0: UserWarning: You do not have a working installation of the service_identity module: 'No module named pyasn1_modules.rfc2459'.  Please install it from <https://pypi.python.org/pypi/service_identity> and make sure all of its dependencies are satisfied.  Without the service_identity module and a recent enough pyOpenSSL to support it, Twisted can perform only rudimentary TLS client hostname verification.  Many valid certificate/hostname mappings may be rejected.
 * Starting tor daemon...                                                                                                                                                                     [ OK ]
:0: UserWarning: You do not have a working installation of the service_identity module: 'No module named pyasn1_modules.rfc2459'.  Please install it from <https://pypi.python.org/pypi/service_identity> and make sure all of its dependencies are satisfied.  Without the service_identity module and a recent enough pyOpenSSL to support it, Twisted can perform only rudimentary TLS client hostname verification.  Many valid certificate/hostname mappings may be rejected.
:0: UserWarning: You do not have a working installation of the service_identity module: 'No module named pyasn1_modules.rfc2459'.  Please install it from <https://pypi.python.org/pypi/service_identity> and make sure all of its dependencies are satisfied.  Without the service_identity module and a recent enough pyOpenSSL to support it, Twisted can perform only rudimentary TLS client hostname verification.  Many valid certificate/hostname mappings may be rejected.
                                                                                                                                                                                              [ OK ]
root@x2:~# :0: UserWarning: You do not have a working installation of the service_identity module: 'No module named pyasn1_modules.rfc2459'.  Please install it from <https://pypi.python.org/pypi/service_identity> and make sure all of its dependencies are satisfied.  Without the service_identity module and a recent enough pyOpenSSL to support it, Twisted can perform only rudimentary TLS client hostname verification.  Many valid certificate/hostname mappings may be rejected.

fpietrosanti · 2017-03-15 14:22:07 UTC

Hi Sergey, are you using Tor2web and GlobaLeaks on the same machine?

If so, with the latests (few days ago) version of GlobaLeaks we’ve included support for HTTPS directly into the platform, that can be configured and enabled via web. Would you give’s a try?

Additionally if you wish we’ve setup Slack to provide support to projects like yours, setting up dedicated support channels.

Let me know if you wish to try GlobaLeaks’s built-in HTTPS and to get invite to Slack

smbd · 2017-03-15 14:50:04 UTC

@fpietrosanti Yes, both on the same machine. Yes, sure, we’d like to try.

smbd · 2017-03-16 08:14:50 UTC

@fpietrosanti So when are we going to proceed? Did I misunderstand you that it’s available already?

fpietrosanti · 2017-03-16 14:19:14 UTC

Yes, it’s under the advanced settings a functionality “Enable HTTPS” if you updated to the last version.
@evilaliv3 @nskelsey could we write a wiki page on Github documenting the feature?

nskelsey · 2017-03-16 17:23:26 UTC

Just wrote a [guide]((https://github.com/globaleaks/GlobaLeaks/wiki/Upgrade-Guide#how-do-i-use-the-built-in-https-server-instead-of-tor2web). @smbd if you can try it out and relay which steps worked didn’t work it would be very helpful!

Heres the link

smbd · 2017-03-16 21:22:39 UTC

@fpietrosanti @nskelsey so which packages are not required and can be deleted now? tor2web? anything else?

smbd · 2017-03-16 21:27:05 UTC

@nskelsey nevermind, I see it in the guide.

smbd · 2017-03-17 09:28:00 UTC

We got it working. Thanks.

fpietrosanti · 2017-03-19 20:56:56 UTC

wow, is the built-in HTTPS going fine?

fpietrosanti · 2017-07-10 11:01:39 UTC

Hello, in the end does it worked fine including the HTTPS server?

Now there’s also letsencrypt built-in for automatic certificate enrollment