From 1c1ecad8b8e1dfb809cd7e46f0eff033accbe8a0 Mon Sep 17 00:00:00 2001 From: lekss361 Date: Mon, 11 May 2026 22:44:53 +0300 Subject: [PATCH] fix(pzz-sync): disable SSL verify for Rosreestr PKK6 (self-signed cert chain) --- backend/app/services/site_finder/pzz_loader.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/backend/app/services/site_finder/pzz_loader.py b/backend/app/services/site_finder/pzz_loader.py index 7da7140a..01dadbf2 100644 --- a/backend/app/services/site_finder/pzz_loader.py +++ b/backend/app/services/site_finder/pzz_loader.py @@ -41,7 +41,10 @@ async def fetch_pkk6_zones() -> list[dict]: offset = 0 page_size = 1000 - async with httpx.AsyncClient(timeout=60, headers=headers) as client: + # verify=False: Росреестр PKK6 использует self-signed cert chain + # (типично для российских госсервисов). Публичный read-only API, + # риск MITM при отсутствии TLS validation минимален для нашего use case. + async with httpx.AsyncClient(timeout=60, headers=headers, verify=False) as client: while True: params = { "where": "1=1",