How to restrict access by using a self-signed certificate?

Question

I have a python script that wants to communicate via HTTPS to a flask application using a self-signed certificate.

I've created an SSL certificate with openssl . I want flask to only accept connections that use that certificate and refuse those that do not.

Can anyone give some thoughts of how can I do that?

Answer 1

I don't think flask is capable of that. Flask only takes care of the content building stuff. It in fact uses Werkzeug as backend while in development mode.

During development, werkzeug's builtin server supports SSL for testing purposes:

run_simple('localhost', 4000, application,
       ssl_context=('/path/to/the/key.crt',
                    '/path/to/the/key.key'))

Details can be found here .

When it comes to production, a flask project has to be depolyed with a WSGI backend that is more productive. There are many backends out there like gunicorn and uWSGI (with nginx ). If you choose to use one of them, You may want to check out their documentation to find about how to add HTTPS support.