search

panzi / verify-ehc

Simple Python script to decode and verify an European Health Certificate QR-code
60 stars 17 forks source link

Add empty user agent to avoid triggering an error 403 #6

Closed Cqoicebordel closed 3 years ago

Cqoicebordel commented 3 years ago

When trying the script with my own data, it went to download the CRL from the ANTS, at http://ants.gouv.fr/csca_crl, and it triggered an error 403, Forbidden.

Adding an user-agent, even empty, solved the issue for me.

Since it's a simple fix, I'm proposing it. It could backfire, depending on the settings of others servers, but I doubt it.

panzi commented 3 years ago

That's great, thank you! Yes I saw that error, but just assumed that there's something broken on their end.

Cqoicebordel commented 3 years ago

It's something on their end ;)
It's a stupid check to make sure we use a browser to access that URL.
That's why I said it could backfire : some could check for a browser name instead of just the empty string. I've seen that when sites blocked the usage of curl but allowed any UA containing "Mozilla", "Chrome", etc.

In any case, you just have to find the correct string, and you are good to go. Like I said, a stupid check :)