Back in the days, before introducing certificate based authentication, users were able to do a "normal/standard/traditional" username/password over SSL authentication. This would be done with something like:
This is documented in https://docs.couchbase.com/python-sdk/current/managing-connections.html#ssl
But with the introduction of certificate based authentication, the Python SDK now (mistakenly) expects that when you pass “certpath”, that you need to use the CertAuthenticator. You would receive something like:
But this should not happen because for certificate based (“passwordless”) authentication, you need two additional parameters “truststorepath” and “keypath” ... you also need to create the client certificates and set up the cluster to accept certificate based auth.
It seems that the Python SDK now does not allow you to do “traditional” username/password based auth over SSL.
The workaround is doing something like this:
But I think it is worth looking into it and fixing.
I have only tested in 2.5.7, but this likely affect all versions since the implementation of certificate based authentication, likely since
|For Gerrit Dashboard: PYCBC-702|
|119851,19||PYCBC-702: allow custom SSL cert for all auth types||release25||couchbase-python-client||Status: MERGED||+2||+1|
|121224,5||PYCBC-702: allow custom SSL cert for all auth types||master||couchbase-python-client||Status: MERGED||+2||+1|