Custom CA certificates and SSL verification settings for corporate proxies?
- Dominant language
- Python
- Stars
- 459
- Forks
- 223
- Avg merge
- 8h 57m
- Merged PRs (30d)
- 13
Description
- [x] I have checked that the [SDK documentation][sdk-docs] doesn't solve my issue.
- [x] I have checked that the [API documentation][api-docs] doesn't solve my issue.
- [x] I have searched the [Box Developer Forums][dev-forums] and my issue isn't already reported (or if it has been reported, I have attached a link to it, for reference).
- [x] I have searched [Issues in this repo][github-repo] and my issue isn't already reported.
### Description of the Issue
When using Box SDK Gen with a corporate proxy that uses self-signed certificates, I’m encountering SSL verification errors. The SDK doesn’t provide a way to configure custom certificates or disable SSL verification, which is needed for environments with corporate proxies that perform SSL inspection.
### Steps to Reproduce
1. Set up corporate proxy in environment variables or requests configuration
2. Initialize Box SDK client
3. Attempt to make API calls
4. Receive SSL verification error with message “certificate verify failed: self signed certificate in certificate chain”
### Expected Behavior
The SDK should provide options to:
- Configure custom CA certificates for verification via a .pem file
- Disable SSL verification
### Error Message, Including Stack Trace
```
HTTPSConnectionPool(host='api.box.com', port=443): Max retries exceeded with url: /oauth2/token (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)')))
```
### Versions Used
Python SDK: 1.8.0
Python: 3.11.x
[sdk-docs]: https://github.com/box/box-python-sdk-gen/tree/main/docs
[api-docs]: https://developer.box.com/docs
[dev-forums]: https://community.box.com/t5/Platform-and-Development-Forum/bd-p/DeveloperForum
[github-repo]: https://github.com/box/box-python-sdk-gen/search?type=Issues
Contributor guide
Assessment
This issue has not been assessed yet.