[Pulp-dev] [Pulp-list] Pulp 3 CLI PoC Feedback

[David Davis]

Good question. I think the short/easy answer is to edit this line of code
and set default=False:

https://github.com/pulp/pulp-cli/blob/e913ca808e324f1dbfd51907450394dab4a935cc/pulpcore/cli/common.py#L54

Alternatively, the CLI uses requests and per the requests docs[0] I think
you can specify which trusted CA bundle to use:

*    This list of trusted CAs can also be specified through the
REQUESTS_CA_BUNDLE environment variable. If REQUESTS_CA_BUNDLE is not set,
CURL_CA_BUNDLE will be used as fallback.*

I think we'll need to figure how to handle this so I filed an issue[1].

[0]
https://requests.readthedocs.io/en/master/user/advanced/#ssl-cert-verification
[1] https://pulp.plan.io/issues/7652

David


On Mon, Oct 5, 2020 at 9:18 AM Brian Bouterse <bmbouter at redhat.com> wrote:

> I'm excited to use this. I went to try it, but the CLI's requests wouldn't
> trust the server which uses self-signed certificates. When running `pulp
> status` I get this error:
>
> requests.exceptions.SSLError: HTTPSConnectionPool(host='localhost',
> port=443): Max retries exceeded with url: /pulp/api/v3/docs/api.json
> (Caused by SSLError(SSLCertVerificationError(1, '[SSL:
> CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local
> issuer certificate (_ssl.c:1123)'))
>
> Let me know if I should file this somewhere more specifically.
>
> On Mon, Oct 5, 2020 at 5:08 AM Melanie Corr <mcorr at redhat.com> wrote:
>
>> Hi all,
>>
>> An initial Pulp 3 CLI PoC is now available. We are hoping to gather as
>> much feedback as possible from the Pulp community so that future
>> development can progress with your opinions and requirements in mind.
>>
>> The following blog post has instructions on how to download and install
>> the Pulp 3 CLI PoC, as well as a demo and a feedback link. Please test out
>> the Pulp 3 CLI PoC and let us know your thoughts. We will have some SWAG
>> for participants :)
>>
>> https://pulpproject.org/2020/09/28/pulp-3-cli-poc-call-for-feedback/
>>
>> If you've any questions or comments, feel free to ask.
>>
>> Melanie
>>
>> --
>>
>> Melanie Corr, RHCE
>>
>> Community Manager
>>
>> Red Hat <https://www.redhat.com>
>>
>> Remote, Ireland
>>
>> mcorr at redhat.com
>> M: +353857774436     IM: mcorr
>> <https://www.redhat.com>
>>
>> _______________________________________________
>> Pulp-dev mailing list
>> Pulp-dev at redhat.com
>> https://www.redhat.com/mailman/listinfo/pulp-dev
>>
> _______________________________________________
> Pulp-list mailing list
> Pulp-list at redhat.com
> https://www.redhat.com/mailman/listinfo/pulp-list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pulp-dev/attachments/20201005/3f0a38bc/attachment.htm>