stare

The python wrapper for the Glance API.

CLI Usage

Use stare --help for the various options provided.

Python Usage

import stare
client = stare.Glance()

# list of analyses as dict
analyses = client.analyses['analyses']
# list of papers as dict
papers = client.papers['papers']

SSL

In order to get SSL handshakes working (certificate verification), one needs to make sure we add/trust the CERN Certification Authorities (CA) for both the Root and the Grid CAs. Specifically, we rely on the Root CA to sign/issue the Grid CA. The Grid CA is what's relied on for the SSL chain. To make this happen, we'll need both PEM for each CA combined into a single CERN_chain.pem file which is bundled up with this package.

Going to the CERN CA Files website and downloading the CERN Root Certification Authority 2 (DER file) and CERN Grid Certification Authority (PEM file). We can then convert the DER to PEM as follows (for the Root CA):

openssl x509 -in CERN_ROOT_CA_2.crt -inform der -outform pem -out CERN_ROOT_CA_2.pem

and then combine the two

cat CERN_GRID_CA_2.pem CERN_ROOT_CA_2.pem > CERN_chain.pem

This can be passed into any python requests::Session via verify='/path/to/CERN_chain.pem' and SSL verification should work.

[1] DER vs PEM?

Reference

• http://bhomnick.net/design-pattern-python-api-client/
• https://packaging.python.org/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/