Fix _tls_no_verify handling

Signed-off-by: Levko Kravets <levko.ne@gmail.com>
databricks · Aug 15, 2024 · d15d4f8 · d15d4f8
1 parent af91cf0
commit d15d4f8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/databricks/sql/auth/thrift_http_client.py b/src/databricks/sql/auth/thrift_http_client.py
@@ -115,9 +115,9 @@ def open(self):
             pool_class = HTTPSConnectionPool
             _pool_kwargs.update(
                 {
-                    "cert_reqs": ssl.CERT_NONE
+                    "cert_reqs": ssl.CERT_REQUIRED
                     if self._ssl_options.tls_verify
-                    else ssl.CERT_REQUIRED,
+                    else ssl.CERT_NONE,
                     "ca_certs": self._ssl_options.tls_trusted_ca_file,
                     "cert_file": self._ssl_options.tls_client_cert_file,
                     "key_file": self._ssl_options.tls_client_cert_key_file,