Internal CA Issue

[mcpl-rhb]

What a great idea! We use internal CA certs on our Zabbix server. This seems to have resulted in this - Error API: HTTPSConnectionPool(host='xxx.xxx.xxx.xxx, port=443): Max retries exceeded with url: /api_jsonrpc.php (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))

We added our Root certs into the system, but still no go.

[Udeus]

Download new version, and try:
python main.py --url <zabbix_address_url> --token <zabbix_api_token> --no-verify

And check response message.

[mcpl-rhb]

Mostly worked. It did throw the same error upon starting the console, and for each step of each operation. So yes, hundreds of error messages. Also, it then failed with an error at about halfway through. I attached the error messages as a photo. Still it looks like it generally work. A great step and I truly appreciate your efforts.

[Udeus]

What is your Zabbix version?

Check script new version and send new error message.

[mcpl-rhb]

7.0.4. That seems to have fixed the error. There is still the warning message about not using certificate verification, but that can just be ignored. Very nice. From: Andrzej Pietryga ***@***.***> Date: Monday, October 14, 2024 at 3:48 PM To: Udeus/Zabbix-Update-All-Templates ***@***.***> Cc: Richard Burns ***@***.***>, Author ***@***.***> Subject: Re: [Udeus/Zabbix-Update-All-Templates] Internal CA Issue (Issue #1) [EXTERNAL] What is your Zabbix version? Check script new version and send new error message. — Reply to this email directly, view it on GitHub<#1 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AS6LZVENLQ2KLVQB4DIAHQTZ3QU2BAVCNFSM6AAAAABP5IKV7OVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIMJSGMYDIMRYG4>. You are receiving this because you authored the thread.Message ID: ***@***.***>

…

________________________________ Unless explicitly attributed, the opinions expressed are personal and not that of Mid-Continent Public Library.

________________________________

[WerVa]

Can you add something like this:

verify_ssl = not args.no_verify
zabbix_version = None

if not verify_ssl:
    import urllib3
    urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

This will ignore warnings when someone uses the no-verify option every time they download a template