Enable SSL for HTTP requests in vulnerability json script

ZOSOpenTools / meta

Meta repository to tie together the various underlying z/OS Open Source tools repositories here

https://zosopentools.github.io/meta/

Apache License 2.0

37 stars 25 forks source link

Enable SSL for HTTP requests in vulnerability json script #771

Closed KeplerBoyce closed 4 weeks ago

KeplerBoyce commented 1 month ago

Currently, the create_cve_json python script from #765 performs requests with SSL disabled, as aiohttp raises exceptions otherwise ("Network is unreachable"). We will need to look into why this happens and how to enable SSL for these requests.

v1gnesh commented 1 month ago

Try pointing aiohttp to the system-default (in our case, the GHA runner) CA bundle. Else, I guess you can get & point to the Firefox CA bundle.

A couple of examples: https://proxiesapi.com/articles/bundling-ssl-certificates-with-pyinstaller-and-aiohttp https://proxiesapi.com/articles/secure-http-requests-in-python-with-aiohttp-clientsession-ssl