Unsolved

3 Apprentice

 • 

318 Posts

642

February 20th, 2023 13:00

unsigned certificate error when trying to connect to REST API using example

Example being used is https://github.com/Isilon/isilon_sdk_python/blob/Isilon_SDK_v0.2.12/isi_sdk_9_1_0/docs/ProtocolsApi.md#list_nfs_exports

 

I get a deny with error

2023-02-20 21:33:42,692 WARNING Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session
2023-02-20 21:33:42,707 WARNING Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session
2023-02-20 21:33:42,717 WARNING Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session

after the 3 timeouts it fails with a Traceback

File "/usr/lib/python2.7/site-packages/urllib3/request.py", line 150, in request_encode_body
return self.urlopen(method, url, **extra_kw)
File "/usr/lib/python2.7/site-packages/urllib3/poolmanager.py", line 323, in urlopen
response = conn.urlopen(method, u.request_uri, **kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 638, in urlopen
_stacktrace=sys.exc_info()[2])
File "/usr/lib/python2.7/site-packages/urllib3/util/retry.py", line 398, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))

there appear to be two solutions;

1. kind of a cheat - make it a trusted connection

2. Create a valid self signed certificate on the isilon

Either one works - any thoughts ?

 

9 Legend

 • 

20.4K Posts

February 24th, 2023 22:00

I cheat,  tell the python request module to not validate SSL certificate.

 

access_zones = requests.get(url_get_access_zones, headers=headers, cookies=cookie, verify=False)

3 Apprentice

 • 

622 Posts

February 26th, 2023 19:00

@cadencep45 ,

HTH also. default is true.

isilon-1# isi_gconfig -t web-config auth_basic=false
isilon-1# isi_gconfig -t web-config auth_basic
auth_basic (bool) = false

3 Apprentice

 • 

622 Posts

February 26th, 2023 20:00

CORRECTION:

@cadencep45 ,

HTH also. default is false.

isilon1-1# isi_gconfig -t web-config auth_basic
auth_basic (bool) = false
isilon-1# isi_gconfig -t web-config auth_basic=true
isilon-1# isi_gconfig -t web-config auth_basic
auth_basic (bool) = true

No Events found!

Top