Unverified SSL context
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 82/100
Research direction
Start in splunklib/binding.py around line 1765, where the SSL context is created for the verify setting. Review the existing verify=False path and confirm that it uses ssl.create_default_context() while preserving the explicit opt-out for self-signed instances. The work is done when insecure-context detection is addressed without changing the requested verification behavior.
Written by the indexing model from the issue text.
Description
Unverified SSL context detected. This will permit insecure connections without verifyingSSL certificates. Can this use 'ssl.create_default_context()' instead.
Suggested Change:
if not verify:
# verify=False is an explicit, user-requested opt-out of certificate
# validation (e.g. for self-signed Splunk instances). Build the context
# from the public API rather than the private _create_unverified_context() helper.
ctx = ssl.create_default_context()
ctx.check_hostname = False
ctx.verify_mode = ssl.CERT_NONE
- Dominant language
- Python
- Stars
- 743
- Forks
- 387
- Avg merge
- 42m
- Merged PRs (30d)
- 4
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from splunk/splunk-sdk-python
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
splunk/splunk-sdk-python#835 · 1 comment · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
splunk/splunk-sdk-python#831 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
splunk/splunk-sdk-python#840 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 74/100
splunk/splunk-sdk-python#828 ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
splunk/splunk-sdk-python#785 · 1 reaction ·
All issues in splunk/splunk-sdk-python
Similar issues
-
Add: hunch Open
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
AbdelStark/awesome-typesafe#104 ·
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
DiamondLightSource/dodal#2211 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
openml/openml-python#1749 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
sipyourdrink-ltd/bernstein#6191 ·