HI Michael,

if you're using self signed SSL certificate there's 2 things you can do:

1. set verify_ssl to 0, I suggest this option only for development and
testing purposes because is not secure
2. add the CA which signed the certificate to the list of trusted CAs, I'm
not 100% sure of how to do this with the current openwrt version, there's
surely a way so if you're interested in this please ask in
https://forum.openwrt.org/

Best regards
Federico

On Fri, Feb 15, 2019 at 6:44 AM Michael Baumhof <[email protected]> wrote:

>
> Debian 4.9.0-8-amd64 #1 SMP Debian 4.9.130-2 (2018-10-27) x86_64
> it was pyhon3
> my playbook is in the moment out of my control.
>
> and the openwisp config looks so:
> config controller 'http'
>         option url 'https://openwisp2-server'
>         option interval '120'
>         option verify_ssl '0'
>         option shared_secret ’shared secret'
>         #option consistent_key '1'
>         #option mac_interface 'eth0'
>         #option management_interface 'tun0'
>         option merge_config '1'
>         option test_config '1'
>         option test_script '/usr/sbin/mytest'
>         option hardware_id_script '/usr/sbin/read_hw_id'
>         #option hardware_id_key '1'
>         option uuid ‚my uuid'
>         option key ‚my key'
>         # curl options
>         #option connect_timeout '15'
>         #option max_time '30'
>         #option capath '/etc/ssl/certs'
>         #option cacert '/etc/ssl/certs/ca-certificates.crt'
>         # hooks
>         #option pre_reload_hook '/usr/sbin/my_pre_reload_hook'
>         #option post_reload_hook '/usr/sbin/my_post_reload_hook‘
>
> the server in not reachable from the internet so i have some trouble with
> the certificates
> think i have to extend the curl options with —insecure
>
> thanks
> Michael
>
> Am 15.02.2019 um 10:26 schrieb andreil1 <[email protected]>:
>
> Hi !
>
> Which Python version should be set with:
>
> update-alternatives --install /usr/bin/python python /usr/bin/python2 1
> update-alternatives --install /usr/bin/python python /usr/bin/python3 2
> update-alternatives --config python
>
>
> on OpenWisp server?
> I found by default on Ubuntu 18.04LTS Ansible playbook installed OpenWisp
> under Python2, although playbook lists
>
> - hosts: openwisp2
>   roles:
>     - openwisp.openwisp2
>   vars:
>     openwisp2_default_from_email: "[email protected]"
>
>     openwisp2_python: python3
>
>
> There is no problem to stick with Python2, yet on 18.04LTS python-pip
> (python 2) is broken:
>
>  python-pip : Depends: python-pip-whl (= 9.0.1-2) but 9.0.1-2.3~ubuntu1 is
> to be installed
>               Recommends: python-all-dev (>= 2.6) but it is not going to
> be installed
>               Recommends: python-setuptools but it is not going to be
> installed
> E: Unable to correct problems, you have held broken packages.
>
> All that could be fixed somehow, yet installation path becomes rather
> thorny.
>
> Which distro and Python version is being used by OpenWISP developers ?
> Thanks in advance.
>
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "OpenWISP" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "OpenWISP" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"OpenWISP" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to