Using influxdb3 client API with a self-signed certificate

InfluxDB 3
,
1

Hello, here’s my situation: I am trying to use influxdb3 core on an ubuntu server. I have created self-signed certificates, set the tls-cert and tls-key arguments for influx, updated my ca-certificates and a curl request works fine to write or query.

However, I would like to use a python library to write or query and apparently the influxdb3-python client library in its version 0.16.0 does not allow me to use a self-signed certificate. Whenever I try a query I get the following:

→ client.write(point)
(Pdb) n

Request: ‘POST https://127.0.0.1:443/api/v2/write?org=default&bucket=uc&precision=ns’
Content-Type: text/plain
Accept: application/json
Authorization: ***
User-Agent: influxdb3-python/0.16.0
Body: b’measurement,location=london temperature=42i’
influxdb_client_3.write_client.rest.ApiException: (0)
Reason: SSLError
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1006)

I try to create the client instance as such:
client = InfluxDBClient3(
host=“127.0.0.1”,
port=8181,
database=“truc”,
debug=True,
verify_ssl=True,
ssl_ca_cert=‘/etc/ssl/certs/influxdb-selfsigned.pem’,

Do you have any experience to share on using influxdb v3 (not v2) with self-signed certificates and this python client library, please?

2

I believe the two recommended paths here are to get an official signed TLS certificate or to set the verify_ssl option to False. Unfortunately, there’s not robust support for self-signed certificates at this time.

3

Thank you for this answer. We had more luck once we instanciated the influxdb3 client with an ssl_context:

ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
ssl_context.check_hostname = False
ssl_context.load_verify_locations(cafile=STANDARD_CERTIFICATE)
client = InfluxDBClient3(
host=“https://localhost:8181”,
database=“foo”,
debug=True,
ssl_context=ssl_context
)

STANDARD_CERTIFICATE is our self-signed certificate.

1 Like