InsecureRequestWarning with LogSession

[carl-roth-agrible]

When calling get_log(), we get the following warning:

/lib/python2.7/site-packages/urllib3/connectionpool.py:858: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
InsecureRequestWarning)
-- Docs: http://doc.pytest.org/en/latest/warnings.html

This warning doesn't happen with other API methods, only LogSession.

Thanks for looking into this.

[martyzz1]

Looks like this is an issue with the SSL certificate on dublin.sessions.logs.heroku.com

heroku_conn = heroku3.from_key(os.environ.get('HEROKU_API_KEY'))                                                  
   ...:                                                                                                                   
DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): api.heroku.com:443
DEBUG:urllib3.connectionpool:https://api.heroku.com:443 "GET /account/rate-limits HTTP/1.1" 200 44

In [10]: log = heroku_conn.get_app_log('xxxxxxxx', dyno='web.1', lines=2, source='app', timeout=2)          
    ...:                                                                                                                  
DEBUG:urllib3.connectionpool:https://api.heroku.com:443 "POST /apps/snap-notifications-api/log-sessions HTTP/1.1" 201 295
DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): dublin.sessions.logs.heroku.com:443
/Users/marty/getasnap/development/pyenv/lib/python3.7/site-packages/urllib3/connectionpool.py:847: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  InsecureRequestWarning)
DEBUG:urllib3.connectionpool:https://dublin.sessions.logs.heroku.com:443 "GET /stream?channel_id=app-cce3368d-9c5c-4878-8d23-cd5bf6210a86&num=2&ps=web.1&region=eu&source=app&tail=false&timestamp=1602609936&token=cFhkFMg0JwuKgtwFF8PdLuH5mXg9oOErfxBZcUuxX_w%3D HTTP/1.1" 200 0

[Techy05]

Recently, I faced a similar warning with LogSession.
heroku3 version: 4.2.1

My code:

import heroku3
import os

app_name = os.environ.get("APP_NAME")
heroku = heroku3.from_key(os.environ.get("HEROKU_API_KEY"))

logs = heroku.apps()[app_name].get_log(lines=1500, timeout=15)
# print or write "logs" in a file

Warning:

2020-10-20T11:21:45.822678+00:00 app[worker.1]: /app/.heroku/python/lib/python3.8/site-packages/urllib3/connectionpool.py:981: InsecureRequestWarning: Unverified HTTPS request is being made to host 'virginia.sessions.logs.heroku.com'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings

2020-10-20T11:21:45.822683+00:00 app[worker.1]: warnings.warn(

Instead of dublin, I got virginia – That's the only difference. I am not sure what's making this warning appear. I don't mind if it is just a temporary issue. If not, please look into it.

Thanks

[martyzz1]

As far as I can tell this is not something that I can fix. The warning looks to me like it is the certificate being returned from the server. e.g. its a self signed cert, and I don't have access to the key.

[Techy05]

I'm not really sure, but could verify=False perimeter of requests.get() be causing any issue?

[martyzz1]

I suspect if I make it verify=True. the request will then fail...