devpi without SSL cert verification?

Hi there, I am in the situation where I have to install an egg-server on AIX box with various flaws - in particular the complete SSL cert verification for python.org and pypi.python.org is broken. There is nothing that can be done to fix the broken state of the box. Would it be possible to install devpi and disable all related SSL cert checks on global basis or do I have to walk through the complete devpi code or the underlaying module dealing with http/s? Andreas

Hi! We use the requests library and use it's session feature. You might be able to edit the new_http_session method in devpi-server/main.py to disable SSL checks. Not sure that will work though, because the actual encryption might still fail, since pypi is available via https only. There might be more places where we create a session, but they should be relatively easy to find. You might have to compile Python and OpenSSL yourself. Maybe pyenv or https://github.com/collective/buildout.python/ would help as well with that. Regards, Florian Schulze On 7 Dec 2016, at 12:17, filtered wrote:
Hi there,
I am in the situation where I have to install an egg-server on AIX box with various flaws - in particular the complete SSL cert verification for python.org and pypi.python.org is broken. There is nothing that can be done to fix the broken state of the box. Would it be possible to install devpi and disable all related SSL cert checks on global basis or do I have to walk through the complete devpi code or the underlaying module dealing with http/s?
Andreas
_______________________________________________ devpi-dev mailing list devpi-dev@python.org https://mail.python.org/mm3/mailman3/lists/devpi-dev.python.org/
participants (2)
-
filtered
-
Florian Schulze