client ssl certificates?

Admittedly, my understanding of this is quite limited but for https downloads to work in our organization, locally issued certificates must be in place. I believe that many corporate environments use client ssl certificates this way.

However, this creates a problem with the use of urllib.request as currently implemented in scout as local certificates are not set.

There are a couple of ways around this:

1. Since urllib.request depends on OpenSSL, setting the SSL_CERT_FILE env variable solves the issue. However, I read somewhere that this is discouraged and may not work in the future.

2. Another way would be to use the cafile argument when urllib.request is called, but that requires implemention.

If the latter solution is preferred, where should the cafile setting go? I don’t yet have a good grasp of the scout code base. Is there a file somewhere where settings like this are normally put?

[dnil]

Hi again! Great that you are working on this!

From the top of my head that would in routine use be the task of the web server, rather than the web app / flask? As in gunicorn --certfile=server.crt in docs - server - Production. The only time I remember we would use a cert directly on the app would be for testing with the tiny built-in flask web-server?

[parlar]

Great!