How to connect using self-signed certificates

[olea]

I know this is a completely improper practice but I have a case with Wikibase Suite running in intranet. It's a fairly complex configuration. When in Internet it get a Letsencrypt certificate automatically. When in an intranet Acme generates a self signed certificate. Now I'm using wbi to populate my instance and obviously I'm geting this «certificate verify failed: self-signed certificate» errors. I'm not a real programmer, but I've tried all the methods I've found to instruct urllib3 to ignore the certificate and failed.

Question is: is there a way I can ask wbi to ignore this error? Thanks in advance.

[LeMyst]

Hello @olea
Sorry for the late answer, I missed your message.
You can use the parameters from the python requests library.
I think you can pass verify=false in most the the function to disable ssl certificate verification.

Do you have an example of script that doesn't work?

[olea]

First all, THANKS for answering :)

Do you have an example of script that doesn't work?

yes:

    login_instance = wbi_login.Clientlogin(user=username, password=password)

gives:

'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1010)'))))

I think you can pass verify=false in most the the function to disable ssl certificate verification.

Trying like this:

    login_instance = wbi_login.Clientlogin(user=username, password=password, verify=False)

gives

TypeError: Clientlogin.__init__() got an unexpected keyword argument 'verify'

and it's the same behavior for wbi_login.Login.

Hope this helps.

[LeMyst]

@olea
I've created the branch add-requests-params-login, I don't know if you can test it.
It should solve the login issue for Login and ClientLogin methods.

[olea]

Well, I think I'm not able to test it. But I guess at some point it would be in a stable release and this is just great. Thanks!

[LeMyst]

You can do a
python -m pip install git+https://github.com/LeMyst/WikibaseIntegrator.git@add-requests-params-login
in your project to install this specific branch

[olea]

Hi again.

Now I found the opportunity of trying your advice. I also found the add-request-params-login branch doesn't exists anymore but, if I understanding it right, it's now included in the main one. So I've updated the module to 0.12.14 and trying again. Now seems I can login but nothing more. Here are all the error messages: https://pastebin.com/LN0PCAg2, always related with [SSL: CERTIFICATE_VERIFY_FAILED].

The script also has this:

import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

But it seems it's not enough.

Do you have any other suggestions maybe? Thanks a lot.