Does PyNetBox API have an option to verify CA cert for Self Signed Cert?

Question

I've been trying to play around with NetBox Ansible modules with a NetBox setup having self signed certificate. [1] That however gives me the error:

Failed to establish connection to Netbox API

I realised that this was due to me using Self signed certificate:

>>> import pynetbox
>>> nb = pynetbox.api(
... 'https://netbox.url',
... token='XXX'
... )
 
>>> nb.dcim.devices.all()
 
<snipped>
 
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='netbox.url', port=443): Max retries exceeded with url: /api/dcim/devices/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1076)')))

I was wondering if there is a way to specify cacert file with pynetbox, the same way we do with requests using verify="/my/path/to/cacert.crt"

>>> nb = pynetbox.api(
... 'https://netbox.url',
... token='XXX',
... private_key_file='/my/path/to/key',
... ssl_verify='/my/path/to/cacert.crt'
... )
Traceback (most recent call last):
  File "<stdin>", line 5, in <module>
TypeError: __init__() got an unexpected keyword argument 'ssl_verify'

[1] Using Netbox Ansible Modules

Python Version: Python 3.7.7 pynetbox version: '2.8'

that would be help to edit the question to add which version of python / pynetbox you're using. — Baptiste Mille-Mathias, Jul 07 '20 at 14:29

score 2 · Accepted Answer · answered Jul 07 '20 at 16:08

2

This was discussed in an issue in their GitHub repo where they allege one can set the REQUESTS_CA_BUNDLE environment variable to point to the CA bundle that requests should use for verifying the endpoint (here are the requests docs)

In theory:

import pynetbox
import os

os.environ['REQUESTS_CA_BUNDLE'] = '/path/to/your/ca.pem'
# and off to the races

answered Jul 07 '20 at 16:08

mdaniel

31,240
5
55
58

Thanks much @mdaniel. That helped. https://pastebin.com/LyLw7svm – sanakhanlibre Jul 08 '20 at 01:13

score 2 · Answer 2 · answered Aug 27 '20 at 16:01

2

You can disable ssl verification like so:

nb.http_session.verify = False

It's mentioned in the docs here https://buildmedia.readthedocs.org/media/pdf/pynetbox/latest/pynetbox.pdf

answered Aug 27 '20 at 16:01

Sherlon Antoine

21
1

Does PyNetBox API have an option to verify CA cert for Self Signed Cert?

2 Answers2

Linked