SSL no_verify option?

[schwark]

Is there a way to make a https request without verifying the SSL certificate? I don’t seem to find a verify=false option. If it is not that simple, what is the workaround to do it?

[nayelyz (SmartThings Developer Support)]

Hi, @schwark.
I already asked the team about this, once I get more info, I’ll come back

[nayelyz (SmartThings Developer Support)]

Following up, @schwark, the team mentioned you can try verify = "none".

[TAustin]

Hi - question regarding this SSL option. I’m porting a Python app that uses “check_hostname=False”. Is this the same thing as verify=‘none’ in Lua or are they different options? If they are different, can I use {check_hostname=false} in an SSL context parameter in an Edge driver?

[nayelyz (SmartThings Developer Support)]

@TAustin

I’m porting a Python app that uses “check_hostname=False”. Is this the same thing as verify=‘none’ in Lua or are they different options? If they are different, can I use {check_hostname=false} in an SSL context parameter in an Edge driver?

Hi, @TAustin
I already shared your question with the engineering team, as soon as we get more info, we’ll let you know.

[nayelyz (SmartThings Developer Support)]

@TAustin, following up, the engineering team mentioned verify=none should help you in this case and provided this sample:

local ssl = require 'cosock.ssl'
local socket = require 'cosock.socket'

-- more code

local sock, err = socket.tcp()

-- check errors, more code

local ssl_sock, err = ssl.wrap(sock, { mode = "client", protocol = "any", verify = "none", options = "all" })

-- check error and proceed

[TAustin]

Excellent. Thank-you!!!