You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Env: python3.8 on Ubuntu 20.04 running tcms_api 12.2
In testing with the default Kiwi Docker setup, I found that after I had installed the ca.crt (retrieved from static/ca.crt and copied to /etc/share/ca-certificates/ and installed with sudo dpkg-reconfigure ca-certificates), I had to:
Use url = https://buildkitsandbox/xml-rpc in my ~/.tcms.conf or a I would get an SSL error with hostname mismatch (I just hacked /etc/hosts to set buildkitsandbox to 127.0.0.1)
Set the env var SSL_CERT_FILE = /etc/ssl/certs/ca-certificates.crt or the SSL context deep inside the connection calls would not find any certs (context.get_ca_certs() returned an empty list)
Python requests uses the REQUESTS_CA_BUNDLE env variable which worked so I knew I had the correct cert but had a lot of trouble figuring this out. Adding something to the docs about this would be very helpful for others that are struggling with certificate verification.
Of course, I'm new to all this so if I missed something or there is an easier/cleaner way to do this, I'd love to know what that is.
The text was updated successfully, but these errors were encountered:
however this won't go into official documentation because it is not a
supported method of consuming Kiwi TCMS, users should always have valid
SSL certificates.
Closes#56
Env: python3.8 on Ubuntu 20.04 running tcms_api 12.2
In testing with the default Kiwi Docker setup, I found that after I had installed the
ca.crt
(retrieved fromstatic/ca.crt
and copied to/etc/share/ca-certificates/
and installed withsudo dpkg-reconfigure ca-certificates
), I had to:url = https://buildkitsandbox/xml-rpc
in my~/.tcms.conf
or a I would get an SSL error with hostname mismatch (I just hacked/etc/hosts
to setbuildkitsandbox
to 127.0.0.1)SSL_CERT_FILE = /etc/ssl/certs/ca-certificates.crt
or the SSL context deep inside the connection calls would not find any certs (context.get_ca_certs()
returned an empty list)Python
requests
uses theREQUESTS_CA_BUNDLE
env variable which worked so I knew I had the correct cert but had a lot of trouble figuring this out. Adding something to the docs about this would be very helpful for others that are struggling with certificate verification.Of course, I'm new to all this so if I missed something or there is an easier/cleaner way to do this, I'd love to know what that is.
The text was updated successfully, but these errors were encountered: