Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

NOTE: In order to leverage the MOUNTED_PATHS  configuration option, your extractor's check_message  function must NOT return CheckMessage.bypass

Customizing SSL Certificate Bundle

Python requests  allows the user to specify which TLS bundle is used for communicating via HTTP. This can be helpful for performing deep-packet inspection on each request in a particular environment.

By default, requests will install its own certificate bundle. You can tell requests to use a different bundle by setting the REQUESTS_CA_BUNDLE environment variable to the path of the target bundle.

For example, the path to the system certificate bundle for CentOS is /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem .

You can mount this file into the container by passing -v /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem .

Finally, tell requests to use this bundle by also passing -e REQUESTS_CA_BUNDLE="/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem" .

Now Python requests will use your custom certificate bundle!

Local Processing using Input Path / Output Path

...