Disable SSL certificate verification

[dineshk07m]

Hello, I want to disable SSL certificate verification on my proxmox. The thing is I'm working on developing a script with API and I'm unable to access it because proxmox uses https and unfortunately my software has only access for http. Another thing I want to add is using postman I am able to perform every API actions but only when I disable SSL verification in the settings of postman(*postman is the API testing tool by the way). Since I'm running locally and not connected to internet I'm perfectly alright to disable all my security features so that I can fully utilise the proxmox API feature which is by far the most amazing API i have ever seen. Is there anyway? Maybe changing some lines on config files?? I also saw some threads but those are old and some are not working. Also I don't want to use any reverse proxy or additional software. Kindly help me everyone.

 

[dcsapak]

do you mean you want to disable https and use http? if yes, thats not possible, pve only serves it's api/content via https

ssl certificate verification is done on the client side, so your api client/application could have such a switch

if you don't want to use some other software inbetween (nginx reverse proxy for example) there is no way to remove ssl for pve

 

[datschlatscher]

Another thing I want to add is using postman I am able to perform every API actions but only when I disable SSL verification in the settings of postman(*postman is the API testing tool by the way).

This is simply because of using a self-signed certificate, which is not issued by a Certificate Authority. Without going into too much detail here, HTTPS always needs a certificate to work properly, in your case it just isn't issued by some centralized entity, that can prove the authenticity of the certificate.

Postman will by default try to validate your certificate with such an authority. Which will, clearly, always fail. By turning off SSL verification you just tell Postman to skip this step, which means your API requests will no longer be blocked. Here you can find some more information on this. [Using Self-Signed SSL Certificates with Postman]

 

[jackie97]

If you need to adjust an SSL certificate checker script to accommodate a situation where SSL verification is disabled, you can make modifications accordingly. Typically, SSL certificate checkers, whether scripts or tools, use specific libraries or commands to verify the validity of certificates.

Here's a general guide on how you might adjust an SSL certificate checker script:

1. For Command-Line SSL Checker:If your script uses a command-line SSL checker like openssl, check if there's an option to disable certificate verification. For example:
   bashCopy code
   openssl s_client -connect example.com:443 -servername example.com -no_ssl2 -no_ssl3 -ign_eof
   The -ign_eof option may bypass certificate verification, but use this cautiously, as it compromises security.
2. For Script Using Libraries (e.g., Python with requests):If your script is written in a programming language and uses a library like requests for SSL verification, modify the script to include an option to disable SSL verification:
   pythonCopy code
   import requests
   
   url = "https://example.com"
   response = requests.get(url, verify=False) # This disables SSL verification
3. Postman Configuration:If you are using Postman for API testing and have SSL verification disabled, you can export the Postman collection as a cURL command. This command might include the necessary options for SSL verification, which you can adapt to your script.

Remember, while disabling SSL verification might be suitable for local development, it poses security risks and should not be implemented in a production environment. Ensure that your final deployment adheres to best security practices, with SSL verification enabled for secure communication.