How to authenticate self signed certificate with password using Python requests

Question

I am trying to send https request to IIS server using python request and fetch the response for parsing.Authentication is done using self signed certificates.I have generated certificate with password and key by using following commands. I am using TestPublicKey.pem and plainkey.pem as inputs to cert attribute in requests.get method. Can someone guide me how to achieve this ?

C:\OpenSSL-Win64\bin>openssl req -x509 -newkey rsa:2048 -keyout TestPrivateKey.pem -out TestPublicKey.pem -days 9999

C:\OpenSSL-Win64\bin>openssl pkcs12 -inkey TestPrivateKey.pem -in TestPublicKey.pem -export -out Test.pfx
Enter pass phrase for cTestPrivateKey.pem:
Enter Export Password:
Verifying - Enter Export Password:

C:\OpenSSL-Win64\bin>openssl rsa -in TestPrivateKey.pem -out plainkey.pem
Enter pass phrase for TestPrivateKey.pem:
writing RSA key


import requests
url = "https://10.110.20.75/REST/getxml"
r = requests.request("GET", url, verify=False,cert=('TestPublicKey.pem','plainkey.pem'))
print r.status_code

if verify is set to False , then getting 403 status_code. If verify is set to True then SSL Error exception is raised.

 raise SSLError(e, request=request)
requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)

r = requests.request("GET", url, verify=False) should work — Rajmani Arya
– Rajmani Arya, Commented Apr 1, 2018 at 10:16
My goal is to authenticate by using self signed certificate .. I am using requests module, if any alternatives are there, please let me know — Auto-learner
– Auto-learner, Commented Apr 1, 2018 at 10:54

Auto-learner · Accepted Answer · 2019-09-21 16:14:52Z

0

I got this resolved by trying with following openssl commands and python code. Note: This answer is certificate without password, if any answers or comments.I am glad to see.

Open SSL commands

Generate the self signed certificate

openssl req -x509 -nodes -days 30 -newkey rsa:2048 -keyout test_Private.key -out test_certificate.cer -subj "/CN=*.hpe.com"

Convert certificate and private key to .PFX

openssl pkcs12 -export -out test_PFX.pfx -inkey test_Private.key -in test_certificate.cer -name "*.hpe.com" -passout pass:

Python code

import requests
url = "https://10.110.20.75/REST/getxml"
webServiceResponse=requests.request("GET",url,verify='test_certificate.cer)
print webServiceResponse.status_code
print webServiceResponse.json()

edited Sep 21, 2019 at 16:14

answered Apr 2, 2018 at 16:51

Auto-learner

1,5219 gold badges27 silver badges46 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to authenticate self signed certificate with password using Python requests

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related