Verify SSL certificate with Requests

Question

I'm trying to verify SSL but it doesn't work.

I went on the confidential website I wanna get, on my browser.
On Chrome I've clicked on the locker > certificates > Details > copy in a file > base 64 > certif.cer

My code is :

test = requests.get('https://confidential.xx/', verify='certif.cer')

And the error is :

File "C:\Users\xxxxx\Downloads\WinPython\WPy64-3850\python-3.8.5.amd64\lib\site-packages\requests\adapters.py", line 514, in send raise SSLError(e, request=request)

SSLError: HTTPSConnectionPool(host='xxxxx', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1123)')))

I don't wanna use verify=False which works but not securised.

I have tried with and without the proxies, same error...

I need to make this working, how make this code working please ?

Try this: https://stackoverflow.com/questions/30405867/how-to-get-python-requests-to-trust-a-self-signed-ssl-certificate Note: You must include the server's certificate and any intermediate certificates. — Andrej Kesely, Oct 06 '20 at 11:15
@AndrejKesely thanks, do you have any idea where I can find the intermediate certificates ? — Totopoildo, Oct 06 '20 at 12:02

score 5 · Accepted Answer · answered Oct 06 '20 at 12:10

5

To make requests not complain about valid certificate, the certificate supplied to verify= must contain any intermediate certificates. To download full chain, you can use Firefox (screenshots):

Click on page info:

Then download full PEM chain:

answered Oct 06 '20 at 12:10

Andrej Kesely

168,389
15
48
91

@Totopoildo What do you mean not available? – Andrej Kesely Oct 06 '20 at 12:20
I cannot see the images. However, I have found two things in Firefow, which one can I choose please ? Download : PEM (cert) / PEM (chain) – Totopoildo Oct 06 '20 at 12:26
@Totopoildo `PEM (chain)` contains the full chain. (Note: Strange, I can see the images. Are you behind proxy?) – Andrej Kesely Oct 06 '20 at 12:27
1

yes I am but I did mistake i and L on my phone when I searched for the image. It seems to work thanks a lot ! – Totopoildo Oct 06 '20 at 12:44

Verify SSL certificate with Requests

1 Answers1

Click on page info:

Then download full PEM chain:

Linked