GRPCS/SSL: Unable to get local issuer certificate

[dlahann]

Diode SDK Python version

v1.0.0

Diode version

v1.3.0

Diode NetBox Plugin version

v1.1.0

NetBox version

v4.2.3

Steps to reproduce

Install the Docker version of diode
provision nginx with SSL and valid private certificates (enterprise cert)
Install private root certificates into local machine store

build test script using python sdk

Expected behavior

I expected the data to be ingested into netbox the same as using an unsecured channel

Observed behavior

I receive this error

WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
I0000 00:00:1749656449.787071 38164 ssl_transport_security.cc:1756] Handshake failed with error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED: unable to ge local issuer certificate

I have validated the certificate is valid by using firebox and openssl which uses the systems cert store.

[dlahann]

This was resolved by addingimport python-certifi-win32to the client.py file. This library must not have taken into account that a lot of people develop in Visual Studio on windows.

[mdmat]

This issue is present for me as well and it seems as though Diode currently does not support privately signed SSL certs, because it is using certifi and nothing else when using SSL. I would 100% expect this to be tunable behavior for enterprises that require this. Let me know if I need to open a separate issue to get the ball rolling here.

[mdmat]

This issue is present for me as well and it seems as though Diode currently does not support privately signed SSL certs, because it is using certifi and nothing else when using SSL. I would 100% expect this to be tunable behavior for enterprises that require this. Let me know if I need to open a separate issue to get the ball rolling here.

#61

[leoparente]

hi @dlahann since v1.5.0 diode added support to cert file and TLS: https://github.com/netboxlabs/diode-sdk-python?tab=readme-ov-file#tls-verification-and-certificates.

Please, check if that solves your issue and let us know.