[python-bugzilla] SSL Certificate Verification

Cole Robinson crobinso at redhat.com
Tue Dec 9 11:19:16 UTC 2014


On 12/08/2014 06:42 PM, Mildred Clarke wrote:
> All,
>
> What is the recommended approach to require the verification of a self signed
> SSL certificate when using python-bugzilla ? I don't see the option to provide
> a custom CA file when connecting via RHBugzilla44.
>
> I believe the reasoning for the failure I'm getting is that the Bugzilla
> module is unable to verify the self signed certificate of my local Bugzilla
> instance. I understand that I can enable sslverify=False to work around this,
> however it is not desired in my environment. How do you provide a bundle for
> verification purposes of self signed certs ? I know "requests" has this
> functionality via function parameter and "REQUESTS_CA_BUNDLE" environment
> variable but thus far neither seem to provide the desired results with
> python-bugzilla module.

There isn't any explicit support in python-bugzilla for setting your own 
certificates. Bug google tells me REQUESTS_CA_BUNDLE should work. I'd 
recommend coding up a minimal reproducer using python-requests directly to try 
to narrow down the problem, there's some similar info here: 
https://github.com/kennethreitz/requests/issues/1491

- Cole



More information about the python-bugzilla mailing list