[Python-apps-team] Bug#861152: nagstamon: InsecureRequestWarning: Unverified HTTPS request is being made.

[Paul Wise]

Package: nagstamon
Version: 2.0.1-1
Severity: serious
Tags: security

When I run nagstamon from a terminal against the Debian nagios I get a
warning about unverified and thus insecure HTTPS requests being made:

https://nagios.debian.org/icinga/
https://dsa.debian.org/ (see here for guest login)

$ nagstamon 
...
/usr/lib/python3/dist-packages/urllib3/connectionpool.py:845: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  InsecureRequestWarning)

-- System Information:
Debian Release: 9.0
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (860, 'testing-proposed-updates'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages nagstamon depends on:
ii  libqt5multimedia5-plugins    5.7.1~20161021-2
ii  python3-bs4                  4.5.3-1
ii  python3-dbus.mainloop.pyqt5  5.7+dfsg-5
ii  python3-pkg-resources        33.1.1-1
ii  python3-psutil               5.0.1-1
ii  python3-pyqt5                5.7+dfsg-5
ii  python3-pyqt5.qtmultimedia   5.7+dfsg-5
ii  python3-pyqt5.qtsvg          5.7+dfsg-5
ii  python3-requests             2.12.4-1
pn  python3:any                  <none>

nagstamon recommends no packages.

nagstamon suggests no packages.

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/python-apps-team/attachments/20170425/b5f13941/attachment-0001.sig>