Skip to content

MAINT: SSL certificate validation deactivated#2

Open
jotelha wants to merge 1 commit into
jic-dtool:masterfrom
jotelha:202010_insecure
Open

MAINT: SSL certificate validation deactivated#2
jotelha wants to merge 1 commit into
jic-dtool:masterfrom
jotelha:202010_insecure

Conversation

@jotelha

@jotelha jotelha commented Oct 1, 2020

Copy link
Copy Markdown
Member

Hello Tjelvar, this is not a true pull request but rather a note. In certain circumstances it might be useful to suppress SSL certificate checking on the client's side, i.e. for testing purposes in general or in case a safe connection through an SSH tunnel exists. I first thought I might be able to do this via some boto3 config file or environment variable, but did not find anything suitable documented onhttps://boto3.amazonaws.com/v1/documentation/api/latest/guide/configuration.html.

@tjelvar-olsson

Copy link
Copy Markdown
Contributor

Think about implementing this with ENV VARS e.g. DTOOL_ECS_IGNORE_SSL

@jotelha

jotelha commented Oct 9, 2020

Copy link
Copy Markdown
Member Author

What I have come across before for SSL certificate verification in HTTPS connections is

 export PYTHONHTTPSVERIFY=0

https://www.python.org/dev/peps/pep-0493/#feature-environment-based-configuration

but apparently that feature is Python 2 specific.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants