Add SSL unverified mode configuration for pycsw

Avoid errors when using autohosted certificate like [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129) Not using in production environments
mjanez · Nov 14, 2024 · e5ea0e1 · e5ea0e1
1 parent c8aa8a8
commit e5ea0e1
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/playbook/inventories/development/host_vars/development_01.yml b/playbook/inventories/development/host_vars/development_01.yml
@@ -332,6 +332,7 @@ pycsw_output_schema: iso19139_inspire
 pycsw_cron_days_interval: 2
 pycsw_cron_hour_start: 4
 pycsw_app_dir: "{{ ckan_src_dir }}/ckan-pycsw"
+pycsw_local_ssl_unverified: false
 #### pycsw conf
 pycsw_identification_title: Sample Geospatial Catalogue
 pycsw_identification_abstract: OGC CSW server powered by pycsw

diff --git a/playbook/inventories/production/host_vars/production_01.yml b/playbook/inventories/production/host_vars/production_01.yml
@@ -331,6 +331,7 @@ pycsw_output_schema: iso19139_inspire
 pycsw_cron_days_interval: 2
 pycsw_cron_hour_start: 4
 pycsw_app_dir: "{{ ckan_src_dir }}/ckan-pycsw"
+pycsw_local_ssl_unverified: false
 #### pycsw conf
 pycsw_identification_title: Sample Geospatial Catalogue
 pycsw_identification_abstract: OGC CSW server powered by pycsw

diff --git a/playbook/inventories/staging/host_vars/staging_01.yml b/playbook/inventories/staging/host_vars/staging_01.yml
@@ -331,6 +331,7 @@ pycsw_output_schema: iso19139_inspire
 pycsw_cron_days_interval: 2
 pycsw_cron_hour_start: 4
 pycsw_app_dir: "{{ ckan_src_dir }}/ckan-pycsw"
+pycsw_local_ssl_unverified: false
 #### pycsw conf
 pycsw_identification_title: Sample Geospatial Catalogue
 pycsw_identification_abstract: OGC CSW server powered by pycsw

diff --git a/playbook/roles/supervisor/templates/workers/ckan_pycsw.conf.j2 b/playbook/roles/supervisor/templates/workers/ckan_pycsw.conf.j2
@@ -12,6 +12,7 @@ environment=
     APP_DIR={{ pycsw_app_dir }},
     PYCSW_CKAN_SCHEMA={{ pycsw_ckan_schema }},
     PYCSW_OUPUT_SCHEMA={{ pycsw_output_schema}},
+    SSL_UNVERIFIED_MODE={{ pycsw_local_ssl_unverified }},
 user={{ ckan_user }}
 numprocs=1
 stdout_logfile={{ ckan_log_dir }}/ckan_pycsw.log