...
NOTE: In order to leverage the MOUNTED_PATHS
configuration option, your extractor's check_message
function must NOT return CheckMessage.bypass
Customizing SSL Certificate Bundle
Python requests
allows the user to specify which TLS bundle is used for communicating via HTTP. This can be helpful for performing deep-packet inspection on each request in a particular environment.
By default, requests will install its own certificate bundle. You can tell requests to use a different bundle by setting the REQUESTS_CA_BUNDLE
environment variable to the path of the target bundle.
For example, the path to the system certificate bundle for CentOS is /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
.
You can mount this file into the container by passing -v /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
.
Finally, tell requests to use this bundle by also passing -e REQUESTS_CA_BUNDLE="/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"
.
Now Python requests will use your custom certificate bundle!
Local Processing using Input Path / Output Path
...