Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NS_VERIFY_SSL=False but OSError: Could not find a suitable TLS CA certificate bundle #2

Open
busch opened this issue Apr 7, 2021 · 0 comments

Comments

@busch
Copy link

busch commented Apr 7, 2021

Hello,

I try to get your script working against an ADC with a self-signed certificate on the management interface. So I have set the
NS_VERIFY_SSL=False
environment variable.

I still receive a SSL verification error:

root@743e48f4ce71:/app# python3 ./netscaler-certbot-hook/netscaler-certbot-hook.py --name dummy.tld
chain certificate letsencrypt not found
uploading chain certificate as letsencrypt-1617819297.crt
Traceback (most recent call last):
File "/app/./netscaler-certbot-hook/netscaler-certbot-hook.py", line 229, in
nitro_upload(nitro_client, chain_file, '{}-{}.crt'.format(args.chain, timestamp))
File "/app/./netscaler-certbot-hook/netscaler-certbot-hook.py", line 86, in nitro_upload
return nitro_client.request(
File "/app/netscaler-certbot-hook/nitro.py", line 57, in request
self._result = method_callback(
File "/usr/local/lib/python3.9/site-packages/requests/api.py", line 119, in post
return request('post', url, data=data, json=json, **kwargs)
File "/usr/local/lib/python3.9/site-packages/requests/api.py", line 61, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python3.9/site-packages/requests/sessions.py", line 542, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python3.9/site-packages/requests/sessions.py", line 655, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python3.9/site-packages/requests/adapters.py", line 416, in send
self.cert_verify(conn, request.url, verify, cert)
File "/usr/local/lib/python3.9/site-packages/requests/adapters.py", line 227, in cert_verify
raise IOError("Could not find a suitable TLS CA certificate bundle, "
OSError: Could not find a suitable TLS CA certificate bundle, invalid path: False

Any chance to disable certificate validation entirely?

Best Regards,
Busch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant