Upgraded Sopel v7.1.0 to v7.1.1, but it won't connect with its SSL anymore.

[antdude]

Hello.

I just "pip install --upgrade sopel" in a remote Fedora box's shell account to upgrade to v7.1.1, but it doesn't connect with SSL anymore.

$ ./sopel
Sopel 7.1.1 (running on Python 3.9.5)
https://sopel.chat/

Loaded config file: /home/ant/.sopel/default.cfg
[2021-06-19 19:29:11,880] sopel.bot INFO - Loading plugins...
[2021-06-19 19:29:11,885] sopel.bot INFO - Plugin loaded: pronouns
[2021-06-19 19:29:11,887] sopel.bot INFO - Plugin loaded: tell
[2021-06-19 19:29:11,889] sopel.bot INFO - Plugin loaded: remind
[2021-06-19 19:29:11,890] sopel.bot INFO - Plugin loaded: invite
[2021-06-19 19:29:11,892] sopel.bot INFO - Plugin loaded: find
[2021-06-19 19:29:11,899] sopel.bot INFO - Plugin loaded: admin
[2021-06-19 19:29:11,906] sopel.bot INFO - Plugin loaded: ip
[2021-06-19 19:29:11,907] sopel.bot INFO - Plugin loaded: ping
[2021-06-19 19:29:11,968] sopel.bot INFO - Plugin loaded: safety
[2021-06-19 19:29:11,976] sopel.bot INFO - Plugin loaded: reload
[2021-06-19 19:29:11,977] sopel.bot INFO - Plugin loaded: choose
[2021-06-19 19:29:11,984] sopel.bot INFO - Plugin loaded: meetbot
[2021-06-19 19:29:11,996] sopel.bot INFO - Plugin loaded: emoticons
[2021-06-19 19:29:11,997] sopel.bot INFO - Plugin loaded: rand
[2021-06-19 19:29:11,998] sopel.bot INFO - Plugin loaded: countdown
[2021-06-19 19:29:11,999] sopel.bot INFO - Plugin loaded: wiktionary
[2021-06-19 19:29:12,004] sopel.bot INFO - Plugin loaded: wikipedia
Version 5.4.0 of praw is outdated. Version 7.3.0 was released 2 days ago.
[2021-06-19 19:29:12,020] sopel.bot INFO - Plugin loaded: reddit
[2021-06-19 19:29:12,036] sopel.bot INFO - Plugin loaded: tld
[2021-06-19 19:29:12,038] sopel.bot INFO - Plugin loaded: version
[2021-06-19 19:29:12,040] sopel.bot INFO - Plugin loaded: units
[2021-06-19 19:29:12,041] sopel.bot INFO - Plugin loaded: seen
[2021-06-19 19:29:12,042] sopel.bot INFO - Plugin loaded: lmgtfy
[2021-06-19 19:29:12,043] sopel.bot INFO - Plugin loaded: calc
[2021-06-19 19:29:12,049] sopel.bot INFO - Plugin loaded: clock
[2021-06-19 19:29:12,051] sopel.bot ERROR - Cannot register URL callback: Bugzilla URL callback requires "bugzilla.domains" to be configured; check your config file.
[2021-06-19 19:29:12,051] sopel.bot INFO - Plugin loaded: bugzilla
[2021-06-19 19:29:12,051] sopel.bot INFO - Plugin loaded: find_updates
[2021-06-19 19:29:12,053] sopel.bot INFO - Plugin loaded: xkcd
[2021-06-19 19:29:12,055] sopel.bot INFO - Plugin loaded: search
[2021-06-19 19:29:12,057] sopel.bot INFO - Plugin loaded: url
[2021-06-19 19:29:12,059] sopel.bot INFO - Plugin loaded: help
[2021-06-19 19:29:12,059] sopel.bot INFO - Plugin loaded: py
[2021-06-19 19:29:12,062] sopel.bot INFO - Plugin loaded: translate
[2021-06-19 19:29:12,069] sopel.bot INFO - Plugin loaded: adminchannel
[2021-06-19 19:29:12,070] sopel.bot INFO - Plugin loaded: dice
[2021-06-19 19:29:12,070] sopel.bot INFO - Plugin loaded: announce
[2021-06-19 19:29:12,071] sopel.bot INFO - Plugin loaded: uptime
[2021-06-19 19:29:12,072] sopel.bot INFO - Plugin loaded: isup
[2021-06-19 19:29:12,073] sopel.bot INFO - Plugin loaded: unicode_info
[2021-06-19 19:29:12,075] sopel.bot INFO - Plugin loaded: currency
[2021-06-19 19:29:12,078] sopel.bot INFO - Plugin loaded: coretasks
[2021-06-19 19:29:12,078] sopel.bot INFO - Registered 40 plugins, 0 failed, 0 disabled
[2021-06-19 19:29:12,079] sopel.irc.backends INFO - Connecting to irc.DELETEDDOMAIN4PRIVACYREASONS.com:6697...
[2021-06-19 19:29:12,088] sopel.irc.backends ERROR - Connection error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1129)
Traceback (most recent call last):
File "/home/ant/.local/lib/python3.9/site-packages/sopel/irc/backends.py", line 179, in initiate_connect
self.connect((host, port))
File "/usr/lib64/python3.9/asyncore.py", line 338, in connect
self.handle_connect_event()
File "/usr/lib64/python3.9/asyncore.py", line 426, in handle_connect_event
self.handle_connect()
File "/home/ant/.local/lib/python3.9/site-packages/sopel/irc/backends.py", line 284, in handle_connect
self.ssl = ssl.wrap_socket(self.socket, # lgtm [py/insecure-default-protocol]
File "/usr/lib64/python3.9/ssl.py", line 1405, in wrap_socket
return context.wrap_socket(
File "/usr/lib64/python3.9/ssl.py", line 500, in wrap_socket
return self.sslsocket_class._create(
File "/usr/lib64/python3.9/ssl.py", line 1040, in _create
self.do_handshake()
File "/usr/lib64/python3.9/ssl.py", line 1309, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1129)
[2021-06-19 19:29:12,089] sopel.irc.backends INFO - Closing connection
[2021-06-19 19:29:12,089] sopel.bot INFO - Shutting down
[2021-06-19 19:29:12,089] sopel.bot INFO - Stopping the Job Scheduler.
[2021-06-19 19:29:13,080] sopel.bot INFO - Job Scheduler stopped.
[2021-06-19 19:29:13,080] sopel.bot INFO - Calling shutdown for 9 plugins.
[2021-06-19 19:29:13,092] sopel.cli.run WARNING - Disconnected. Reconnecting in 20 seconds...

In my ~/.sopel/default.cfg:
[core]
nick = URL
host = irc.DELETEDDOMAIN4PRIVACYREASONS.com
use_ssl = true
port = 6697

What's wrong? Using unsecured 6667 works though. Thank you for reading and hopefully answering soon. :)

[RustyBower]

Your certificate has expired

ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1129)

[antdude]

Is that my end? How do I fix it since I am just a regular shell account user (no sudo and su access)? I can ask my friend since he has the root access.

[RustyBower]

Whatever server you are connected to needs to update the certificate

[dgw]

Or set this option to no and Sopel will happily connect to any server you like even if its certificate is 50 years old.

https://sopel.chat/docs/config.html#sopel.config.core_section.CoreSection.verify_ssl

[antdude]

Thank you, both! I will let him know. I think he uses self-certificate.