Patched: "/tmp/tmp7rhy90_n/modules/CESNET/warden_client.py"

Author: patched.codes[bot]

modules/CESNET/warden_client.py

@@ -5,6 +5,7 @@
 # Use of this source is governed by a 3-clause BSD-style license, see LICENSE file.
 
 import json, logging, logging.handlers, time
+import ssl
 import http.client
 from urllib.parse import urlparse
 from urllib.parse import urlencode
@@ -277,15 +278,23 @@ def log_err(self, err, prio=logging.ERROR):
         if isinstance(err, Error):
             err.log(self.logger, prio)
         return err
-
+    
     def connect(self):
-
         try:
             if self.url.scheme == 'https':
+                context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH)
+                context.check_hostname = True
+                context.verify_mode = ssl.CERT_REQUIRED
+                if self.cafile:
+                    context.load_verify_locations(self.cafile)
+                if self.keyfile and self.certfile:
+                    context.load_cert_chain(certfile=self.certfile, keyfile=self.keyfile)
+                if self.ciphers:
+                    context.set_ciphers(self.ciphers)
+    
                 conn = http.client.HTTPSConnection(
                     self.url.netloc,
-                    key_file=self.keyfile,
-                    cert_file=self.certfile,
+                    context=context,
                     timeout=self.timeout,
                 )
             elif self.url.scheme == 'http':
@@ -294,8 +303,7 @@ def connect(self):
                 )
             else:
                 return Error(
-                    message='Don\'t know how to connect to "%s"'
-                    % self.url.scheme,
+                    message='Don\'t know how to connect to "%s"' % self.url.scheme,
                     url=self.url.geturl(),
                 )
         except Exception:
@@ -309,7 +317,7 @@ def connect(self):
                 cafile=self.cafile,
                 ciphers=self.ciphers,
             )
-
+    
         return conn
 
     def sendRequest(self, func='', payload=None, **kwargs):