[ckan-dev] basic question on configuring SSL with CKAN

[gustavo w]

Hi,

I installed ckan 2.6.2, and its working fine (via deb package), with data
explorer ok.
after I set the SSL protocol using the tutorial available at: (
https://github.com/ckan/ckan/wiki/SSL), whenever I upload a new CSV file,
the data is not displayed anymore into the dataexplorer.

When I force the datastore to process the CSV file, I get the following
error:

"Erro: File
"/usr/lib/ckan/datapusher/lib/python2.7/site-packages/apscheduler/scheduler.py",
line 512, in _run_job retval = job.func(*job.args, **job.kwargs)
File "/usr/lib/ckan/datapusher/src/datapusher/datapusher/jobs.py", line
300, in push_to_datastore resource = get_resource(resource_id, ckan_url,
api_key)
File "/usr/lib/ckan/datapusher/src/datapusher/datapusher/jobs.py", line
250, in get_resource 'Authorization': api_key}
File
"/usr/lib/ckan/datapusher/lib/python2.7/site-packages/requests/api.py",
line 110, in post return request('post', url, data=data, json=json,
**kwargs)
File
"/usr/lib/ckan/datapusher/lib/python2.7/site-packages/requests/api.py",
line 56, in request return session.request(method=method, url=url,
**kwargs)
File
"/usr/lib/ckan/datapusher/lib/python2.7/site-packages/requests/sessions.py",
line 488, in request resp = self.send(prep, **send_kwargs)
File
"/usr/lib/ckan/datapusher/lib/python2.7/site-packages/requests/sessions.py",
line 609, in send r = adapter.send(request, **kwargs)
File
"/usr/lib/ckan/datapusher/lib/python2.7/site-packages/requests/adapters.py",
line 497, in send raise SSLError(e, request=request)
SSLError(SSLError(SSLError(1, '_ssl.c:510: error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed'),),)"

Looks like it's an error with python lib SSL protocol.
I was instructed to follow the tutorial at:
http://docs.ckan.org/projects/datapusher/en/latest/using.html#configuring-ssl-verification

the tutorial says:
*"If you still have problems verifying certificates, or maybe for test
purposes, you can switch the verification off in datapusher_settings.py:*
*SSL_VERIFY = False"*

*I set SSL_VERIFY = False in datapusher_settings.py*
*but the server does not reflect this change.*

*I found two files like this in my machine.*
*./etc/ckan/datapusher_settings.py*
*./usr/lib/ckan/datapusher/src/datapusher/deployment/datapusher_settings.py*

*I changed both and rebooted the machine.*
*somehow it does not work.*
*Do I have to recompile somehow the file?*

*Can anyone give me directions on how to set the SSL_VERIFY flag into the
datapusher_settings? do I have to recompile anything else?*

*Thanks a lot,*
*Gustavo*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20171024/57b8a04e/attachment-0002.html>