8 replies to this topic

[hyperonex]

I'm implementing a plugin which needs to communicate with https website.

 

I get the following error:

 

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)

 

Here is my code:

headers = {"Content-type": "application/x-www-form-urlencoded","Accept": "text/plain","Authorization": "Basic %s" % b64Val}
conn = httplib.HTTPSConnection("viewthatnow.com", 443)
conn.request("POST", "/savezapentry/savezapentry.php", values, headers)
response = conn.getresponse()

How could I avoid verifying the SSL certificate using python 2.7.3 (used by OpenPli) ??

 

[WanWizard]

This issue is addressed and fixed in OpenPLi 5.

 

In OpenPLi 4 you need to bypass SSL verification:

conn = httplib.HTTPSConnection("viewthatnow.com", 443, context=ssl._create_unverified_context())

[ian1095]

I've tried to address this issue in Pli 4.0 by adding this code to the ssl.py

 

try:
    create_unverified_https_context = _ssl._create_unverified_context
except AttributeError:
    # Legacy Python that doesn't verify HTTPS certificates by default
    pass
else:
    # Handle target environment that doesn't support HTTPS verification
    _ssl._create_default_https_context = _create_unverified_https_context

 

Can you tell me why it doesnt work ?

 

I'm not in the least bothered by security so globally disabling this is perfectly fine in my case.

 

Ian.

[athoik]

Check if the server has SNI enabled.

If yes you need to use OpenPLi 5, simply forget OpenPLi 4 and SNI.

Edited by athoik, 27 October 2016 - 14:02.

[ian1095]

Ok Thanks

 

Yes it does have SNI enabled.

 

So there's no getting round that with Pli 4.0 then ?

 

Shame.

 

Ian.

[hyperonex]

 

This issue is addressed and fixed in OpenPLi 5.

 

In OpenPLi 4 you need to bypass SSL verification:

conn = httplib.HTTPSConnection("viewthatnow.com", 443, context=ssl._create_unverified_context())

 

It works thanks.

Do we have to change the code whenever OpenPli 5 released?

[WanWizard]

Ideally yes, if you want the certificate to be validated.

[hyperonex]

 

This issue is addressed and fixed in OpenPLi 5.

 

In OpenPLi 4 you need to bypass SSL verification:

conn = httplib.HTTPSConnection("viewthatnow.com", 443, context=ssl._create_unverified_context())

 

Sorry I reported that it works but I discovered that it didn't work in a real box with OpenPli 4. I get the following error:

"'module' object has no attribute '_create_unverified_context'"

Any Help ?

[WanWizard]

Eh, yeah. You need Python 2.7.9 for that, and OpenPLi 4 runs 2.7.3.
 
You could try something like:

import urllib2
import ssl

ctx = ssl.create_default_context()
ctx.check_hostname = False
ctx.verify_mode = ssl.CERT_NONE

urllib2.urlopen("https://your-test-server.local")