|
|
bcabe90e13
|
feat(scripts): add container diagnostic script for SSL cert + encryption health
Checks 6 categories:
1. Environment — ENCRYPTION_KEY, LLM_SSL_VERIFY, LLM_CA_CERT_URLS
2. System CA store — ca-certificates.crt, custom/LLM certs, hash symlinks
3. OpenSSL connectivity — cafile vs capath (per ADR-0009 Finding 7)
4. Python SSLContext(capath) — what _get_ssl_verify() uses
5. httpx(capath) — integration test
6. Encryption key health — decrypt test for all LLM provider api_keys
Usage:
docker cp scripts/diag_container.py superset-tools-backend-1:/tmp/
docker compose exec backend python3 /tmp/diag_container.py --target lite.ai.rusal.com:443
|
2026-07-06 20:27:03 +03:00 |
|
