Allow to skip ssl certificate validation

[id]

Our internal server has a poor ssl certificate and cs doesn't work with that one out of the box.

[brutasse]

A more secure fix would be to pass the CA bundle to cs to make it validate your self-signed cert. Allowing verify=False makes it very easy to break the security chain.

Can you try passing a REQUESTS_CA_BUNDLE environment variable during your cs calls as explained in the requests docs?

[id]

Right. It worked, thanks.
Although the certificate is signed by a legitimate company root certificate, and that one is installed at /etc/pki/ca-trust/source/anchors/, requests could not find it.

[brutasse]

Yeah, requests uses certifi which provides Mozilla's CA bundle and bypasses the system CA setup. Glad it's working fine now!