Use hostname to match ssl cert

yandex · Nov 14, 2023 · 5094481 · 5094481
1 parent f729eb9
commit 5094481
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/ch_tools/monrun_checks_keeper/keeper_commands.py b/ch_tools/monrun_checks_keeper/keeper_commands.py
@@ -208,12 +208,12 @@ def keeper_command(cmd, timeout, verify_ssl_certs):
             if not verify_ssl_certs:
                 context.check_hostname = False
                 context.verify_mode = ssl.CERT_NONE
-            with context.wrap_socket(sock, server_hostname="localhost") as ssock:
-                ssock.connect(("localhost", port))
+            with context.wrap_socket(sock, server_hostname=socket.getfqdn()) as ssock:
+                ssock.connect(("127.0.0.1", port))
                 ssock.sendall(cmd.encode())
                 return ssock.makefile().read(-1)
         else:
-            sock.connect(("localhost", port))
+            sock.connect(("127.0.0.1", port))
             sock.sendall(cmd.encode())
             return sock.makefile().read(-1)