fixup: also set verify_mode to CERT_NONE

dlenski · Apr 20, 2024 · 71bf81d · 71bf81d
1 parent 00e458b
commit 71bf81d
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/gp_saml_gui.py b/gp_saml_gui.py
@@ -225,11 +225,16 @@ def init_poolmanager(self, connections, maxsize, block=False):
         ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
         ssl_context.set_ciphers('DEFAULT:@SECLEVEL=1')
         ssl_context.options |= 1<<2  # OP_LEGACY_SERVER_CONNECT
-        ssl_context.check_hostname = self.verify
+
+        if not self.verify:
+            ssl_context.check_hostname = False
+            ssl_context.verify_mode = ssl.CERT_NONE
+
         if hasattr(ssl_context, "keylog_filename"):
             sslkeylogfile = environ.get("SSLKEYLOGFILE")
             if sslkeylogfile:
                 ssl_context.keylog_filename = sslkeylogfile
+
         self.poolmanager = urllib3.PoolManager(
                 num_pools=connections,
                 maxsize=maxsize,