Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option to skip SSL certificate verification #20

Closed
tdi opened this issue Jul 24, 2015 · 4 comments
Closed

Add option to skip SSL certificate verification #20

tdi opened this issue Jul 24, 2015 · 4 comments

Comments

@tdi
Copy link

tdi commented Jul 24, 2015

First of all thank you for your
This option will allow to use HVAC with vault API secured with StartSSL certs.

@ianunruh
Copy link
Member

Hello! It's not documented in the readme, but there is an option when constructing the client to disable SSL verification.

https://github.com/ianunruh/hvac/blob/master/hvac/v1/__init__.py#L6

@tdi
Copy link
Author

tdi commented Jul 24, 2015

Great ! Thanks

@tdi tdi closed this as completed Jul 24, 2015
@ianunruh
Copy link
Member

@tdi FYI, if you're trying to make your environment secure, you should tell HVAC where the CA certificate is, so it can actually verify the cert. You can do this by passing the path to the CA certificate (in PEM format) to the verify parameter on the constructor, like so:

from hvac import Client

client = Client(url='https://vault:8200', verify='/path/to/startssl/ca-cert.pem')

HVAC uses Requests under the hood, which provides this functionality. You can read more about it here:

http:https://docs.python-requests.org/en/latest/user/advanced/#ssl-cert-verification

@tdi
Copy link
Author

tdi commented Jul 25, 2015

Yes ! works nicely with ca-bundle.pem form StartSSL super thanks @ianunruh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants