From 0ed1af4ef9284f0779bfb93d1be4682bcde56d8e Mon Sep 17 00:00:00 2001 From: Ivan Krakhmaliuk Date: Mon, 22 Jan 2024 13:37:57 +0200 Subject: [PATCH] Centry reporters: allow default config to work with snake-oil certs --- dusty/reporters/centry/connector.py | 7 +++++-- dusty/reporters/centry_loki/emitter.py | 6 +++--- dusty/reporters/centry_status/reporter.py | 3 ++- 3 files changed, 10 insertions(+), 6 deletions(-) diff --git a/dusty/reporters/centry/connector.py b/dusty/reporters/centry/connector.py index 7d1fb31..d76c9b8 100644 --- a/dusty/reporters/centry/connector.py +++ b/dusty/reporters/centry/connector.py @@ -1,3 +1,4 @@ +import os from requests import post from json import dumps from . import constants as c @@ -23,11 +24,13 @@ def __init__(self, url, token, project_id, test_id, test_type): def create_test_results(self, test_results): report_id = post(f'{self.url}{self.report_url}', data=dumps(test_results), - headers=self.headers).json() + headers=self.headers, + verify=os.environ.get("SSL_VERIFY", "").lower() in ["true", "yes"]).json() return report_id['id'] def create_findings(self, findings): result = post(f'{self.url}{self.finding_api}', data=dumps(findings), - headers=self.headers) + headers=self.headers, + verify=os.environ.get("SSL_VERIFY", "").lower() in ["true", "yes"]) return result.content diff --git a/dusty/reporters/centry_loki/emitter.py b/dusty/reporters/centry_loki/emitter.py index f6fd54e..0a4709c 100644 --- a/dusty/reporters/centry_loki/emitter.py +++ b/dusty/reporters/centry_loki/emitter.py @@ -36,7 +36,7 @@ def __init__( # pylint: disable=R0913 self, loki_push_url, loki_user=None, loki_password=None, loki_token=None, default_labels=None, - verify=True, retries=3, retry_delay=0.5, timeout=15, + verify=False, retries=3, retry_delay=0.5, timeout=15, ): self.loki_push_url = loki_push_url self.loki_user = loki_user @@ -152,7 +152,7 @@ def __init__(self, settings): loki_password=self.settings.get("password", None), loki_token=self.settings.get("token", None), default_labels=default_loki_labels, - verify=self.settings.get("verify", True), + verify=self.settings.get("verify", False), # retries=3, # retry_delay=0.5, # timeout=15, @@ -198,7 +198,7 @@ def __init__(self, settings): loki_password=self.settings.get("password", None), loki_token=self.settings.get("token", None), default_labels=default_loki_labels, - verify=self.settings.get("verify", True), + verify=self.settings.get("verify", False), # retries=3, # retry_delay=0.5, # timeout=15, diff --git a/dusty/reporters/centry_status/reporter.py b/dusty/reporters/centry_status/reporter.py index f1d1f0d..a40814e 100644 --- a/dusty/reporters/centry_status/reporter.py +++ b/dusty/reporters/centry_status/reporter.py @@ -53,7 +53,8 @@ def _status_listener(self, event, data): requests.put( f'{self.config["url"]}/api/v1/{TEST_MAPPING[self.test_type]}/test_status/{self.config["project_id"]}/{self.config["test_id"]}', json={"test_status": data}, - headers={"Authorization": f'Bearer {self.config["token"]}'} + headers={"Authorization": f'Bearer {self.config["token"]}'}, + verify=self.config.get("ssl_verify", False), ) @staticmethod