UNSOLVED

cadencep45

updated

4 years ago

C

cadencep45

4 Apprentice

318 Posts

0

669

February 20th, 2023 13:00

unsigned certificate error when trying to connect to REST API using example

Example being used is https://github.com/Isilon/isilon_sdk_python/blob/Isilon_SDK_v0.2.12/isi_sdk_9_1_0/docs/ProtocolsApi.md#list_nfs_exports

 

I get a deny with error

2023-02-20 21:33:42,692 WARNING Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session
2023-02-20 21:33:42,707 WARNING Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session
2023-02-20 21:33:42,717 WARNING Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session

after the 3 timeouts it fails with a Traceback

File "/usr/lib/python2.7/site-packages/urllib3/request.py", line 150, in request_encode_body
return self.urlopen(method, url, **extra_kw)
File "/usr/lib/python2.7/site-packages/urllib3/poolmanager.py", line 323, in urlopen
response = conn.urlopen(method, u.request_uri, **kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 638, in urlopen
_stacktrace=sys.exc_info()[2])
File "/usr/lib/python2.7/site-packages/urllib3/util/retry.py", line 398, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))

there appear to be two solutions;

1. kind of a cheat - make it a trusted connection

2. Create a valid self signed certificate on the isilon

Either one works - any thoughts ?