Support SSL verification via internal CA bundle

- Also updates documentation
- See issues #204 and #270

2 files changed, 32 insertions, 0 deletions

diff --git a/gitlab/config.py b/gitlab/config.py
index d5e87b6..d1c29d0 100644
--- a/gitlab/config.py
+++ b/gitlab/config.py
@@ -61,11 +61,28 @@ class GitlabConfigParser(object):
         self.ssl_verify = True
         try:
             self.ssl_verify = self._config.getboolean('global', 'ssl_verify')
+        except ValueError:
+            # Value Error means the option exists but isn't a boolean.
+            # Get as a string instead as it should then be a local path to a
+            # CA bundle.
+            try:
+                self.ssl_verify = self._config.get('global', 'ssl_verify')
+            except Exception:
+                pass
         except Exception:
             pass
         try:
             self.ssl_verify = self._config.getboolean(self.gitlab_id,
                                                       'ssl_verify')
+        except ValueError:
+            # Value Error means the option exists but isn't a boolean.
+            # Get as a string instead as it should then be a local path to a
+            # CA bundle.
+            try:
+                self.ssl_verify = self._config.get(self.gitlab_id,
+                                                   'ssl_verify')
+            except Exception:
+                pass
         except Exception:
             pass
 
diff --git a/gitlab/tests/test_config.py b/gitlab/tests/test_config.py
index 73830a1..83d7daa 100644
--- a/gitlab/tests/test_config.py
+++ b/gitlab/tests/test_config.py
@@ -40,6 +40,11 @@ url = https://two.url
 private_token = GHIJKL
 ssl_verify = false
 timeout = 10
+
+[three]
+url = https://three.url
+private_token = MNOPQR
+ssl_verify = /path/to/CA/bundle.crt
 """
 
 no_default_config = u"""[global]
@@ -109,3 +114,13 @@ class TestConfigParser(unittest.TestCase):
         self.assertEqual("GHIJKL", cp.token)
         self.assertEqual(10, cp.timeout)
         self.assertEqual(False, cp.ssl_verify)
+
+        fd = six.StringIO(valid_config)
+        fd.close = mock.Mock(return_value=None)
+        m_open.return_value = fd
+        cp = config.GitlabConfigParser(gitlab_id="three")
+        self.assertEqual("three", cp.gitlab_id)
+        self.assertEqual("https://three.url", cp.url)
+        self.assertEqual("MNOPQR", cp.token)
+        self.assertEqual(2, cp.timeout)
+        self.assertEqual("/path/to/CA/bundle.crt", cp.ssl_verify)