#34265 add support for SHOTGUN_DISABLE_SSL_VALIDATION env variable#96
Closed
kporangehat wants to merge 4 commits intomasterfrom
Closed
#34265 add support for SHOTGUN_DISABLE_SSL_VALIDATION env variable#96kporangehat wants to merge 4 commits intomasterfrom
kporangehat wants to merge 4 commits intomasterfrom
Conversation
added 2 commits
January 7, 2016 20:58
We are updating our server certificates to more secure ones signed with SHA-2. Older versions of Python may have some issues with this change so we're tying to help accommodate these users by making it a little easier to disable SSL certificate verification without having to modify the actual Python API code, and using an environment variable instead. The impact of disabling validation is that the identity of the Shotgun server can't be determined for sure. The communication is still encrypted, but this leaves the client subject to a man-in-the-middle attack. Such attacks are hard to perpetrate, but remain a possibility.
added 2 commits
January 7, 2016 21:11
Contributor
|
With the above code, I would get the following logic in a bash shell: Is this perhaps confusing? If we did something like this: , Also, I think it would be nice if we could add unit tests if possible, since environment variables sometimes behave subtly different on different platforms. Also, is this documented anywhere? I did a quick check through the docs, but couldn't seem to find any mention of |
Author
|
Agreed. Pulled the release until it's fixed. ⚡ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Setting the
SHOTGUN_DISABLE_SSL_VALIDATIONenvironment variable to 1 will set theNO_SSL_VALIDATIONoption.