python https client

gistfile1.txt

import ssl
import httplib
import pprint

ctx = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH, "/etc/pki/tls/certs/ca-bundle.crt")
ctx.verify_mode = ssl.CERT_OPTIONAL
c = httplib.HTTPSConnection("www.google.com:443", context=ctx)
c.request("GET", "/")
print c.getresponse().read()[:80]

ctx = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH, "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt")
pprint.pprint(ctx.get_ca_certs())
# https://docs.python.org/2/library/ssl.html#ssl.SSLContext.verify_mode
# require server cert and validate issuer/CA chain
ctx.verify_mode = ssl.CERT_OPTIONAL
c = httplib.HTTPSConnection("kubernetes.default.svc:443", context=ctx)
try:
  c.request("GET", "/")
  print c.getresponse().read()
except Exception, e:
  print "Could not connect to kubernetes.default.svc:443:", e