mirror of
https://github.com/hansjone/netx.git
synced 2026-10-11 08:00:49 +08:00
Default UME TLS verify off for lab self-signed certs.
Restore ume_verify_tls=false so onsite UME login works without a .env override; production should set NETX_UME_VERIFY_TLS=true or pin a CA. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
parent
0ebf137776
commit
6eeaa457b8
5 changed files with 6 additions and 16 deletions
|
|
@ -305,17 +305,7 @@ class UMEClient:
|
|||
self._lock_releaser()
|
||||
except Exception:
|
||||
pass
|
||||
detail = str(exc)[:240]
|
||||
if self.verify_tls and (
|
||||
"CERTIFICATE_VERIFY_FAILED" in detail
|
||||
or "certificate verify failed" in detail.lower()
|
||||
or "SSLCertVerificationError" in type(exc).__name__
|
||||
):
|
||||
detail = (
|
||||
f"{detail} (hint: set NETX_UME_VERIFY_TLS=false for lab "
|
||||
"self-signed UME, or pin a CA; restart API after change)"
|
||||
)
|
||||
raise RuntimeError(f"ume_login_failed:{detail}") from exc
|
||||
raise RuntimeError(f"ume_login_failed:{str(exc)[:240]}") from exc
|
||||
|
||||
token, ttl = self._extract_token_and_ttl(data)
|
||||
if not token:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue