Skip to content

feat: make SOAR SSL verification configurable - #225

Closed
dandye wants to merge 1 commit into
mainfrom
feature/configurable-ssl-verify
Closed

feat: make SOAR SSL verification configurable#225
dandye wants to merge 1 commit into
mainfrom
feature/configurable-ssl-verify

Conversation

@dandye

@dandye dandye commented Jan 26, 2026

Copy link
Copy Markdown
Collaborator

Summary

This PR adds the ability to configure SSL/TLS verification for the SecOps SOAR MCP server. This is useful as a last resort for environments with self-signed certificates or proxy-level TLS interception.

Changes

  • http_client.py: Updated HttpClient to use aiohttp's ssl parameter instead of verify. Restored ssl_verify parameter in request methods.
  • bindings.py: Added logic to read SOAR_SSL_VERIFY from environment variables (defaults to true). Handles string-to-bool conversion.
  • consts.py: Added ENV_SOAR_SSL_VERIFY constant.
  • pyproject.toml: Added certifi dependency.

Usage

Set the environment variable SOAR_SSL_VERIFY=false to disable certificate verification (only for the SOAR API URL).

@dandye
dandye requested a review from a team January 26, 2026 12:33
@dandye
dandye marked this pull request as draft January 26, 2026 12:34
@dandye

dandye commented Aug 30, 2026

Copy link
Copy Markdown
Collaborator Author

Old draft PR, addressed cleanly in PR #295.

@dandye dandye closed this Aug 30, 2026
@dandye
dandye deleted the feature/configurable-ssl-verify branch August 30, 2026 00:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant