try truststore

Author: HenriWahl

backend/connection.py

@@ -1,15 +1,22 @@
+from ssl import PROTOCOL_TLS_CLIENT
+
 from httpx import Client, Response
+from truststore import SSLContext
 
 from backend.config import config, \
     TIMEOUT
 from backend.helpers import log
 
 # disable TLS verification if configured
 if config.api.get('verify', True) == False:
-    gitlab_session = Client(follow_redirects=True, verify=False)
+    verify = False
 else:
-    gitlab_session = Client(follow_redirects=True)
+    # use system trust store for TLS verification
+    verify = SSLContext(PROTOCOL_TLS_CLIENT)
+gitlab_session = Client(follow_redirects=True, verify=verify)
 
+# add GitLab API token to session headers
+# this is needed for all requests to the GitLab API
 gitlab_session.headers.update({'PRIVATE-TOKEN': config.api.token})
 
 

requirements.txt

@@ -7,3 +7,4 @@ markdown
 munch
 pyaml
 python-dateutil
+truststore