Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Question] Setting up SSL to work with the API #71

Open
sidho opened this issue Dec 3, 2021 · 1 comment
Open

[Question] Setting up SSL to work with the API #71

sidho opened this issue Dec 3, 2021 · 1 comment
Labels
question Further information is requested

Comments

@sidho
Copy link

sidho commented Dec 3, 2021

Hi all,

Appreciate all the hard work ya'll have done to resurrect these things. Is there any documentation or guidance on working with the SSL certs for this API? I have another Pi running a python flask server and I'd like for that Pi to be able to hit the feeder service API but I'm having issues figuring out how to set up the SSL certs. When trying to talk to the feeder service API I get an error due to the self signed certificate:

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate

I'm not very familiar working with these SSL certs and Python is not the language I typically work in.

Thanks!

@mbillow mbillow added the question Further information is requested label Dec 4, 2021
@mbillow
Copy link
Member

mbillow commented Dec 4, 2021

Yah, unfortunately FastAPI only supports serving itself on a single port and the feeder only communicates when it can do a TLS handshake. The handshake doesn’t have to contain a trusted certificate… but some certificate does have to be there. For this reason we just default to generating a self-signed certificate.

You can configure your own certificates if you want and FeederNet will gladly use them. Otherwise, your only other options would be to grab your self-signed public key and explicitly trust it in your client or disable SSL validation in the client.

If you want to share more specifics about how your client wants to call our API, I can probably give you more practical advice.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants