From d6d4f7262ed82a77b806a9203ca11c24607086b0 Mon Sep 17 00:00:00 2001
From: YueGuobin <yueguobin@outlook.com>
Date: Thu, 23 Apr 2026 23:20:41 +0800
Subject: [PATCH] fix(copilot): add verify=False for HTTPS with self-signed
 certs

Add verify=False to requests.get() when capture_url uses HTTPS protocol,
to skip SSL certificate validation. This allows PacketCaptureTool to
work with GNS3 servers using self-signed certificates.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 gns3server/agent/gns3_copilot/tools_v2/packet_capture_tools.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/gns3server/agent/gns3_copilot/tools_v2/packet_capture_tools.py b/gns3server/agent/gns3_copilot/tools_v2/packet_capture_tools.py
index 67e84d315..0c43a189d 100644
--- a/gns3server/agent/gns3_copilot/tools_v2/packet_capture_tools.py
+++ b/gns3server/agent/gns3_copilot/tools_v2/packet_capture_tools.py
@@ -185,11 +185,14 @@ class PacketCaptureTool(BaseTool):
             import requests
 
             headers = {"Authorization": f"Bearer {jwt_token}"}
+            # Use verify=False for HTTPS to skip certificate validation (for self-signed certs)
+            verify_cert = not capture_url.startswith("https://")
             response = requests.get(
                 capture_url,
                 headers=headers,
                 stream=True,
                 timeout=30,
+                verify=verify_cert,
             )
 
             if response.status_code != 200: