Python Requests: SSL Certificate Verify issue about h2t

[security-prince]

Yo! looks perfect to me, nice work chap!

[gildasio]

Hi @security-prince ,

Nice feature request! I can code this later. I think that add some option (eg -n for redirects or -u for user-agents) to don't verify certificates. Do you suggest an option name to use?

[security-prince]

i think -k will do, provided if that is not in use by any other option already

[gildasio]

@security-prince , -k and about the long version?

Today these are the options used:

optional arguments:
  -h, --help            show this help message and exit
  -v, --verbose         increase output verbosity: -v print response headers,
                        -vv print response and request headers
  -a, --all             scan all cataloged headers [default]
  -g, --good            scan good headers only
  -b, --bad             scan bad headers only
  -H HEADERS [HEADERS ...], --headers HEADERS [HEADERS ...]
                        scan only these headers (see available in list sub-
                        command)
  -p PRINT [PRINT ...], --print PRINT [PRINT ...]
                        a list of additional information about the headers to
                        print. For now there are two options: description and
                        refs (you can use either or both)
  -i IGNORE_HEADERS [IGNORE_HEADERS ...], --ignore-headers IGNORE_HEADERS [IGNORE_HEADERS ...]
                        a list of headers to ignore in the results
  -B, --no-banner       don't print the h2t banner
  -E, --no-explanation  don't print the h2t output explanation
  -o {normal,csv,json}, --output {normal,csv,json}
                        choose which output format to use (available: normal,
                        csv, json)
  -n, --no-redirect     don't follow http redirects
  -u USER_AGENT, --user-agent USER_AGENT
                        set user agent to scan request
  -r, --recommendation  output only recommendations [default]
  -s, --status          output actual status (eg: existent headers only)

[gildasio]

@security-prince are think curllike? -k, --insecure?