Project

General

Custom queries

Profile

Actions

Bug #14606

closed

Gazillions of "InsecureRequestWarning: Unverified HTTPS request is being made" in logs

Added by Nicolas CHARLES about 6 years ago. Updated about 3 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
Web - Technique editor
Target version:
Severity:
Minor - inconvenience | misleading | easy workaround
UX impact:
User visibility:
Operational - other Techniques | Rudder settings | Plugins
Effort required:
Priority:
27
Name check:
Fix check:
Regression:

Description

each entry are validated by the technique editor when we type them
if certificate is not defined, we get a lot of

[Mon Apr 08 13:14:22.581979 2019] [wsgi:error] [pid 7443] /usr/share/ncf-api-virtualenv/lib/python2.7/site-packages/urllib3/connectionpool.py:857: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
[Mon Apr 08 13:14:22.582008 2019] [wsgi:error] [pid 7443]   InsecureRequestWarning)

this is fairly annoying

Actions #2

Updated by Nicolas CHARLES about 6 years ago

  • Status changed from In progress to New
  • Assignee deleted (Nicolas CHARLES)

if request >= 2.16.0, we should use import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

https://stackoverflow.com/questions/27981545/suppress-insecurerequestwarning-unverified-https-request-is-being-made-in-pytho

as i'm not sure of which version of python we use everywhere, i'd rather leave it to more expert people

Actions #4

Updated by François ARMAND about 6 years ago

I don't think we want to set that property, it would hide a potentially serious problem.
AFAIU, it only happens with self-signer certificate ? So it should not happen in a real rudder installation ?

Actions #18

Updated by Alexis Mousset about 4 years ago

  • Status changed from New to Rejected

no more flask in rudder, closing

Actions

Also available in: Atom PDF