Skip to content
Related Articles

Related Articles

Improve Article
Save Article
Like Article

SSL Certificate Verification – Python requests

  • Last Updated : 09 Sep, 2021

Requests verifies SSL certificates for HTTPS requests, just like a web browser. SSL Certificates are small data files that digitally bind a cryptographic key to an organization’s details. Often, a website with a SSL certificate is termed as secure website. By default, SSL verification is enabled, and Requests will throw a SSLError if it’s unable to verify the certificate.

Disable SSL certificate verification

Let us try to access a website with an invalid SSL certificate, using Python requests 

 Attention geek! Strengthen your foundations with the Python Programming Foundation Course and learn the basics.  

To begin with, your interview preparations Enhance your Data Structures concepts with the Python DS Course. And to begin with your Machine Learning Journey, join the Machine Learning - Basic Level Course

Python3




# import requests module
import requests
 
# Making a get request
response = requests.get('https://expired.badssl.com/')
 
# print request object
print(response)

Output :- 
 



ssl-certificate-verification-python-requests

This website doesn’t have SSL setup so it raises this error.
To disable certificate verification, at the client side, one can use verify attribute.  

Python3




# import requests module
import requests
 
# Making a get request
response = requests.get('https://expired.badssl.com/', verify = False)
 
# print request object
print(response)

Output 

ssl-certificate-verification-python-requests-1

Since output response 200 is printed, we can assume that request was successful.  

Manual SSL Verification

one can also pass the link to the certificate for validation via python requests only.  

Python3




# import requests module
import requests
 
# Making a get request
response = requests.get('https://github.com', verify ='/path / to / certfile')
 
# print request object
print(response)

This would work in case the path provided is correct for SSL certificate for github.com. 

Client Side Certificates

You can also specify a local cert to use as client side certificate, as a single file (containing the private key and the certificate) or as a tuple of both files’ paths: 

>>> requests.get('https://kennethreitz.org', cert=('/path/client.cert', '/path/client.key'))

or persistent:  

s = requests.Session()
s.cert = '/path/client.cert'

If you specify a wrong path or an invalid cert, you’ll get a SSLError: 

>>> requests.get('https://kennethreitz.org', cert='/wrong_path/client.pem')
SSLError: [Errno 336265225] _ssl.c:347: error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib

 




My Personal Notes arrow_drop_up
Recommended Articles
Page :

Start Your Coding Journey Now!