Custom Timeout to the server request made by Client

[ritishbhardwaj]

App is installed in client machine and from there the application is making the request to check for updates or download the updates, what is happening in my case is, when the server was down and in that time the application got stopped or not responsive when making the request. So i got the idea of why not we customize the timeout from the client side.
Can you tell whether i am right or not and if i am right can you tell me the way how to customize it and where to refer the code.

[dennisvang]

...
So i got the idea of why not we customize the timeout from the client side.
Can you tell whether i am right or not and if i am right can you tell me the way how to customize it and where to refer the code.

Hi @ritishbhardwaj

Python-tuf defines the tuf.ngclient.RequestsFetcher, which has a socket_timeout argument.

Tufup defines a subclass of RequestsFetcher, called AuthRequestsFetcher, but we do not expose this in the tufup client. This was intentional, to limit the complexity for tufup users.

Your best option would probably be to monkey-patch AuthRequestsFetcher (or RequestsFetcher) to override the default socket_timeout value.

Do note that this may have security implications, as discussed in several python-tuf issues. To name a few:

• ngclient: Increase default network timeout theupdateframework/python-tuf#2442
• Reinstate full protection against slow retrieval attacks theupdateframework/python-tuf#932
• Socket timeout default value pretty onerous theupdateframework/python-tuf#204
• ...

[ritishbhardwaj]

I think it is working for me till now for the file of 30MB
will ping you again if any issue raise again.
Will Solve it together.