brad-sp / cuckoo-modified

Modified edition of cuckoo
271 stars 100 forks source link

Add workaround for PEP-0476 issues to vSphere machinery module #228

Closed jgajek closed 9 years ago

jgajek commented 9 years ago

Recent Python versions (2.7.9+) implement PEP-0476, which enables strict SSL certificate verification by default in the standard ssl module. The ssl module is being used internally by the VMware Python SDK, which has not yet been updated to allow unverified SSL connections via it's Connect() and SmartConnect() interfaces. There is no easy way to avoid the resulting connection failures in environments that use a self-signed certificate on the ESXi host.

This pull request adds a 'unverified_ssl' parameter to the vsphere.conf file which globally turns off SSL verification in the ssl module as a workaround.