Announcement Banner
UNSOLVED

cadencep45

updated

4 years ago

C

cadencep45

4 Apprentice

•

318 Posts

0

674

February 20th, 2023 13:00

unsigned certificate error when trying to connect to REST API using example

Example being used is https://github.com/Isilon/isilon_sdk_python/blob/Isilon_SDK_v0.2.12/isi_sdk_9_1_0/docs/ProtocolsApi.md#list_nfs_exports

 

I get a deny with error

2023-02-20 21:33:42,692 WARNING Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session
2023-02-20 21:33:42,707 WARNING Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session
2023-02-20 21:33:42,717 WARNING Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),)': /session/1/session

after the 3 timeouts it fails with a Traceback

File "/usr/lib/python2.7/site-packages/urllib3/request.py", line 150, in request_encode_body
return self.urlopen(method, url, **extra_kw)
File "/usr/lib/python2.7/site-packages/urllib3/poolmanager.py", line 323, in urlopen
response = conn.urlopen(method, u.request_uri, **kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 667, in urlopen
**response_kw)
File "/usr/lib/python2.7/site-packages/urllib3/connectionpool.py", line 638, in urlopen
_stacktrace=sys.exc_info()[2])
File "/usr/lib/python2.7/site-packages/urllib3/util/retry.py", line 398, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))

there appear to be two solutions;

1. kind of a cheat - make it a trusted connection

2. Create a valid self signed certificate on the isilon

Either one works - any thoughts ?

 

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    484

    0

    Posted February 24th, 2023 22:00

    I cheat,  tell the python request module to not validate SSL certificate.

     

    access_zones = requests.get(url_get_access_zones, headers=headers, cookies=cookie, verify=False)

  • Phil.Lam

    4 Apprentice

    •

    642 Posts

    •

    15 Points

    465

    0

    Posted February 26th, 2023 19:00

    @cadencep45 ,

    HTH also. default is true.

    isilon-1# isi_gconfig -t web-config auth_basic=false
    isilon-1# isi_gconfig -t web-config auth_basic
    auth_basic (bool) = false

  • Phil.Lam

    4 Apprentice

    •

    642 Posts

    •

    15 Points

    459

    0

    Posted February 26th, 2023 20:00

    CORRECTION:

    @cadencep45 ,

    HTH also. default is false.

    isilon1-1# isi_gconfig -t web-config auth_basic
    auth_basic (bool) = false
    isilon-1# isi_gconfig -t web-config auth_basic=true
    isilon-1# isi_gconfig -t web-config auth_basic
    auth_basic (bool) = true