can you add HTTPS functionality to a python flask web server

Question

I am trying to build a web interface to Mock up a restful interface on networking device this networking device uses Digest Authentication and HTTPS  I figured out how to integrate Digest Authentication into the web server but I cannot seem to find out how to get https using FLASK if you can show me how please comment on what i would need to do with the code below to make that happen   from flask import Flask  jsonify  app   Flask   name       app route      def index        return  Flask is running      app route   data   def names        data     names     John    Jacob    Julie    Jennifer        return jsonify data    if   name         main         app run

User · Answer

To run https functionality or SSL authentication in flask application you first install "pyOpenSSL" python package using:
```
 pip install pyopenssl
```

Next step is to create 'cert.pem' and 'key.pem' using following command on terminal :

 openssl req -x509 -newkey rsa:4096 -nodes -out cert.pem -keyout key.pem -days 365

Copy generated 'cert.pem' and 'kem.pem' in you flask application project
Add ssl_context=('cert.pem', 'key.pem') in app.run()

For example:

    from flask import Flask, jsonify

    app = Flask(__name__)

    @app.route('/')

    def index():

        return 'Flask is running!'


    @app.route('/data')

    def names():

        data = {"names": ["John", "Jacob", "Julie", "Jennifer"]}

        return jsonify(data)

  if __name__ == '__main__':

        app.run(ssl_context=('cert.pem', 'key.pem'))

User · Answer

Deploy Flask on a real web server  rather than with the built-in  development  server   See the Deployment Options chapter of the Flask documentation  Servers like Nginx and Apache both can handle setting up HTTPS servers rather than HTTP servers for your site   The standalone WSGI servers listed would typically be deployed behind Nginx and Apache in a proxy-forwarding configuration  where the front-end server handles the SSL encryption for you still

User · Answer

If this webserver is only for testing and demoing purposes  You can use ngrok  a open source too that tunnels your http traffic    Bascially ngrok creates a public URL  both http and https  and then tunnels the traffic to whatever port your Flask process is running on   https   ngrok com product  It only takes a couple minutes to set up  You first have to download the software  Then run the command   ngrok http  port number your python process is running on   It will then open up a window in terminal giving you both an http and https url to access your web app

User · Answer

Don t use openssl or pyopenssl its now become obselete in python  Refer the Code below  from flask import Flask  jsonify import os  ASSETS DIR   os path dirname os path abspath   file     app   Flask   name       app route      def index        return  Flask is running      app route   data   def names        data     names     John    Jacob    Julie    Jennifer        return jsonify data    if   name         main         context     local crt    local key   certificate and key files     app run debug True  ssl context context

User · Answer

For a quick n  dirty self-signed cert  you can also use flask run --cert adhoc or set the FLASK RUN CERT env var     export FLASK APP  app py    export FLASK ENV development   export FLASK RUN CERT adhoc    flask run    Serving Flask app  app py   lazy loading     Environment  development    Debug mode  on    Running on https   127 0 0 1 5000   Press CTRL C to quit     Restarting with stat    Debugger is active     Debugger PIN  329-665-000   The adhoc option isn t well documented  for good reason  never do this in production   but it s mentioned in the cli py source code   There s a thorough explanation of this by Miguel Grinberg at Running Your Flask Application Over HTTPS

User · Answer

this also works in a pinch from flask import Flask  jsonify   from OpenSSL import SSL context   SSL Context SSL PROTOCOL TLSv1 2  context use privatekey file  server key   context use certificate file  server crt        app   Flask   name       app route      def index        return  Flask is running      app route   data   def names        data     quot names quot     quot John quot    quot Jacob quot    quot Julie quot    quot Jennifer quot        return jsonify data     if   name         main          app run   if   name         main            app run host  127 0 0 1   debug True  ssl context context

User · Answer

The top-scoring answer has the right idea  but the API seems to have evolved so that it no longer works as when it was first written  in 2015  In place of this  from OpenSSL import SSL context   SSL Context SSL PROTOCOL TLSv1 2  context use privatekey file  server key   context use certificate file  server crt    I used this  with Python 3 7 5  import ssl context   ssl SSLContext   context load cert chain  fullchain pem    privkey pem    and then supplied the SSL context in the Flask run call as it said  app run      ssl context context     My server crt file is called fullchain pem and my server key is called privkey pem   These files were supplied to me by my LetsEncrypt Certbot

[python] can you add HTTPS functionality to a python flask web server?

Examples related to python

Examples related to rest

Examples related to https

Examples related to flask