diff options
| author | Alexandre Flament <alex@al-f.net> | 2022-07-19 23:40:11 +0200 |
|---|---|---|
| committer | Alexandre FLAMENT <alexandre.flament@hesge.ch> | 2022-10-14 13:59:22 +0000 |
| commit | 32e8c2cf098ae59baae5672e70436e47299bec82 (patch) | |
| tree | 2b70a212b2ccc5e26e77690f8a766f6e573c3c77 /docs | |
| parent | 72f6367e2323b2c57b2bb479dbadccd5b690a986 (diff) | |
searx.network: add "verify" option to the networks
Each network can define a verify option:
* false to disable certificate verification
* a path to existing certificate.
SearXNG uses SSL_CERT_FILE and SSL_CERT_DIR when they are defined
see https://www.python-httpx.org/environment_variables/#ssl_cert_file
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/admin/engines/settings.rst | 44 |
1 files changed, 32 insertions, 12 deletions
diff --git a/docs/admin/engines/settings.rst b/docs/admin/engines/settings.rst index cac9d286..086b3ccb 100644 --- a/docs/admin/engines/settings.rst +++ b/docs/admin/engines/settings.rst @@ -347,18 +347,27 @@ Communication with search engines. pool_maxsize: 10 # Number of allowable keep-alive connections, or null # to always allow. The default is 10. enable_http2: true # See https://www.python-httpx.org/http2/ - # uncomment below section if you want to use a proxy - # proxies: - # all://: - # - http://proxy1:8080 - # - http://proxy2:8080 - # uncomment below section only if you have more than one network interface - # which can be the source of outgoing search requests - # source_ips: - # - 1.1.1.1 - # - 1.1.1.2 - # - fe80::/126 - + # uncomment below section if you want to use a custom server certificate + # see https://www.python-httpx.org/advanced/#changing-the-verification-defaults + # and https://www.python-httpx.org/compatibility/#ssl-configuration + # verify: ~/.mitmproxy/mitmproxy-ca-cert.cer + # + # uncomment below section if you want to use a proxyq see: SOCKS proxies + # https://2.python-requests.org/en/latest/user/advanced/#proxies + # are also supported: see + # https://2.python-requests.org/en/latest/user/advanced/#socks + # + # proxies: + # all://: + # - http://proxy1:8080 + # - http://proxy2:8080 + # + # using_tor_proxy: true + # + # Extra seconds to add in order to account for the time taken by the proxy + # + # extra_proxy_timeout: 10.0 + # ``request_timeout`` : Global timeout of the requests made to others engines in seconds. A bigger @@ -408,6 +417,17 @@ Communication with search engines. ``enable_http2`` : Enable by default. Set to ``false`` to disable HTTP/2. +.. _httpx verification defaults: https://www.python-httpx.org/advanced/#changing-the-verification-defaults +.. _httpx ssl configuration: https://www.python-httpx.org/compatibility/#ssl-configuration + +``verify``: : ``$SSL_CERT_FILE``, ``$SSL_CERT_DIR`` + Allow to specify a path to certificate. + see `httpx verification defaults`_. + + In addition to ``verify``, SearXNG supports the ``$SSL_CERT_FILE`` (for a file) and + ``$SSL_CERT_DIR`` (for a directory) OpenSSL variables. + see `httpx ssl configuration`_. + ``max_redirects`` : 30 by default. Maximum redirect before it is an error. |