Merge aebb37a into 54c2fb6

releases/unreleased/sortinghat-option-to-verify-ssl.yml

@@ -0,0 +1,8 @@
+---
+title: SortingHat option to verify SSL
+category: added
+author: Jose Javier Merchante <jjmerchante@bitergia.com>
+issue: null
+notes: |
+  Include `verify_ssl` option to SortingHat configuration to verify
+  the connection with the server. By default it is `True`.

sirmordred/config.py

@@ -482,6 +482,12 @@ def general_params(cls):
                     "default": False,
                     "type": bool,
                     "description": "GraphQL server use SSL/TSL connection"
+                },
+                "verify_ssl": {
+                    "optional": True,
+                    "default": True,
+                    "type": bool,
+                    "description": "Verify SSL connection to the server"
                 }
             }
         }

sirmordred/task.py

@@ -55,11 +55,13 @@ def __init__(self, config):
         self.db_path = sortinghat.get('path', None) if sortinghat else None
         self.db_port = sortinghat.get('port', None) if sortinghat else None
         self.db_ssl = sortinghat.get('ssl', False) if sortinghat else False
+        self.db_verify_ssl = sortinghat.get('verify_ssl', True) if sortinghat else True
         self.db_unaffiliate_group = sortinghat['unaffiliated_group'] if sortinghat else None
         if sortinghat:
             self.client = SortingHatClient(host=self.db_host, port=self.db_port,
                                            path=self.db_path, ssl=self.db_ssl,
-                                           user=self.db_user, password=self.db_password)
+                                           user=self.db_user, password=self.db_password,
+                                           verify_ssl=self.db_verify_ssl)
             self.client.connect()
         else:
             self.client = None

sirmordred/task_enrich.py

@@ -194,6 +194,7 @@ def __enrich_items(self):
                                self.db_port,
                                self.db_path,
                                self.db_ssl,
+                               self.db_verify_ssl,
                                None,  # args.refresh_projects,
                                None,  # args.refresh_identities,
                                author_id=None,