connect to https server about python-arango HOT 6 CLOSED

Hi cer1969,

It looks like your server does not have a valid SSL certificate installed.
I released python-arango 3.3.0, which now has a new argument check_cert.
You can set this field to False to bypass SSL verification:

client = ArangoClient(
    protocol="https", 
    host="www.test.com", 
    port=12345, 
    username="root", 
    password="password",
    enable_logging=True, 
    verify=True, 
    check_cert=False
)

Please upgrade python-arango, set the flag to False and try again.

Thanks.

from python-arango.

I'am using the web interface and the browser says the certificate is valid. I also checked here https://www.digicert.com/help/.

from python-arango.

Hi cer1969,

It could be that the requests library (which python-arango uses under the hood) cannot locate the certificate bundle to verify the the certificate of your server.

Could you try some of the solutions mentioned in http://stackoverflow.com/questions/10667960/python-requests-throwing-up-sslerror? Please note that the new parameter check_cert simply passes whatever value you specify to request library's verify parameters.

For example, it is possible that you don't have the certificate bundle installed at all which you could solve by something like: sudo apt-get install ca-certificates (ubuntu)

Let me know how that goes.
Thanks.

from python-arango.

I tried with check_cert="certificate.file" but I got the same error.
Probably a request,py problem.
When I do check_cert=False I understand the certificate is used but not
verified, so if I know the certificate is ok I can trust the connection is
secure?

2016-09-08 12:03 GMT-03:00 Joohwan Oh [email protected]:

Hi cer1969,

It could be that the requests library (which python-arango uses under the
hood) cannot locate the certificate bundle to verify the the certificate of
your server.

Could you try some of the solutions mentioned in http://stackoverflow.com/
questions/10667960/python-requests-throwing-up-sslerror? Please note that
the new parameter check_cert simply passes whatever value you specify to
request library's verify parameters.

For example, it is possible that you don't have the certificate bundle
installed at all which you could solve by something like: sudo apt-get
install ca-certificates (ubuntu)

Let me know how that goes.
Thanks.

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#19 (comment),
or mute the thread
https://github.com/notifications/unsubscribe-auth/ANFidZkZ02d1jvGhR26ZMXJjBGI5JoL5ks5qoCPTgaJpZM4J27qm
.

from python-arango.

If verify if set to False, the certificate is not checked at all, which leaves you open to man-in-the-middle attacks. You would probably be fine going without this check if this is a small pet project that you are working on with ArangoDB. Ideally you want to fix the core problem. Have you tried this?

pip install certifi

from python-arango.

As this is not a problem with python-arango itself I will close this issue now.

from python-arango.