Connecting calibredb to running content server using SSL (self signed)

[Venia Legendi]

Hello, I run a content server in docker with

/usr/bin/calibre-server --port 8081 \
--enable-local-write --enable-auth --userdb /ebook/server-users.sqlite \
--ssl-certfile /config/ssl/cert.pem --ssl-keyfile /config/ssl/cert.key \
--url-prefix /ebook /ebook/eBooks

works great, thanks.

But when I try to connect from docker shell with:

calibredb --with-library https://localhost:8081/#eBooks \
--username Huh --password Buh list --limit 10

I get an somewhat explainable "urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate", it's self signed.

I have no idea how to provide calibredb with the certificate it seems to miss, any one has?

Thanks.

[kovidgoyal]

caliredb uses python which in turn uses openssl. There are env vars that control where openssl gets its certs from. Presumably you could use those, though havent actually tried.

[Venia Legendi]

Originally Posted by kovidgoyal

caliredb uses python which in turn uses openssl.

OK, that's it - THANK YOU.

If someone is interested, using docker with linuxserver's calibre

# Get all info on domain:
echo | openssl s_client -servername 127.0.0.1 -connect 127.0.0.1:8081
# Up, running, only certifacate missing

# Any environment?
env | grep -i ssl
# None for me

# SSL Config Directory
openssl version -d
# is /usr/lib/ssl, there
# /usr/lib/ssl/certs -> /etc/ssl/certs

# get the subject hash of the cerficate
openssl x509 -subject_hash -in myRoot.crt | head -1

# copy it, "normally" file with name, symlink with hash, easy going here:
cp myRoot.crt /etc/ssl/certs/[subject hash].0
# Check again with openssl, calibredb connects flawlessly
# I mapped the file in my compose.yaml