Question

You are writing a Python script that uses the requests library to push OSPF configuration to a production IOS-XE device via RESTCONF over HTTPS. The device presents a certificate signed by your organization's internal enterprise CA. During testing you received an SSLError, so a colleague suggests adding verify=False to every request. Security policy forbids disabling certificate validation in production. Which approach lets the script authenticate the device's certificate while complying with policy?

Accepted Answer

Set the verify parameter to the filesystem path of the enterprise CA bundle (PEM) so requests validates the device certificate against that trust chain.

Answer

Keep verify=False but add a Content-Type: application/yang-data+json header so the payload is trusted.

Answer

Pass cert=('client.crt','client.key') to requests, which validates the server certificate using the client key pair.

Answer

Set verify=True with no other change, since requests automatically trusts internal enterprise CAs by default.