Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat: Added option to disable SSL verify #3676

Conversation

maayanbar13
Copy link
Contributor

@maayanbar13 maayanbar13 commented Feb 10, 2021

Pull Request Check List

Resolves: #1556

  • Added tests for changed code.
  • Updated documentation for changed code.

I'm opening this new pull request to replace /pull/2912 since @Celeborn2BeAlive is no longer following the issue.

@SergioBlnc
Copy link

Hi,

When this feat will be released?

Thanks in advance
Sbg

@mcdevitts
Copy link

Being able to disable SSL verification is whats keeping me from using poetry since we have a private repository. What can I do to help get this pull request merged?

Copy link

@therewillbeblood therewillbeblood left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what about fixing the typos in get_trusted right away?

poetry/factory.py Outdated Show resolved Hide resolved
poetry/factory.py Outdated Show resolved Hide resolved
poetry/utils/helpers.py Outdated Show resolved Hide resolved
tests/utils/test_helpers.py Outdated Show resolved Hide resolved
maayanbar13 and others added 2 commits August 19, 2021 10:10
Fixed typo from get_truested to get_trusted

Co-authored-by: f <[email protected]>
trusted = "true"
config.merge({"certificates": {"foo": {"trusted": trusted}}})

assert get_truested(config, "foo")

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

there seems to be a typo here as well: get_trusted

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed :)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! However it seems more must be done as part of this change:
RuntimeError: The Poetry configuration is invalid: E - [source.0] Additional properties are not allowed ('trusted' was unexpected)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is expected, as written in the original post, in order for tests to pass you must first complete the mentioned PR in poetry-core as it contains the required changes to the poetry configuration schema.

@abn abn self-assigned this Apr 6, 2022
@maayanbar13
Copy link
Contributor Author

I've Reverted the changes according to python-poetry/poetry-core#80. Now disabling SSL verify is only through poetry config certificates.foo.verify False

@McClunatic
Copy link

If I can help get this merged, please let me know! I'm unable to use Poetry at work without it.

@Never77
Copy link

Never77 commented May 4, 2022

If I can help get this merged, please let me know! I'm unable to use Poetry at work without it.

have the same trouble, if it can help to merge, i'm available to help. I need this feature to use private repository at the office.

Never77
Never77 previously approved these changes May 4, 2022
@abn
Copy link
Member

abn commented May 7, 2022

@maayanbar13 thanks for working on this. As we are slowly improving how the http interactions are managed, I'd expect this to go via the authenticator now rather than being configured at the repository instance level. We want to make sure that the requests going to this url is also trusted, similar to how auth and certs are applied. The repository instances can expose this property similar to authenticated url property.

@pabloh007
Copy link

Let me know when this will be released and if there is anything I can help with to move this along.

@neersighted
Copy link
Member

neersighted commented May 26, 2022

Let me know when this will be released and if there is anything I can help with to move this along.

Please refer to the above comment -- this is unable to be merged as is, but recent refactors have made possible a more idiomatic and clean way to introduce this functionality.

@maayanbar13 maayanbar13 requested a review from abn May 28, 2022 13:11
@abn
Copy link
Member

abn commented May 29, 2022

@maayanbar13 @neersighted I have rolled up the functional change requested here with a few other structural changes to cert handling in #5719.

Copy link

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Feb 29, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Option to disable SSL verify
10 participants