Merge pull request 'fix(tradein): verify=False для WFS геопортала ЕКБ (российский CA-серт)' (#1788 ) from fix/tradein-ekb-geoportal-ssl-verify into main

Reviewed-on: #1788
fix(tradein): verify=False for EKB geoportal WFS (Russian-CA cert)
2026-06-19 16:02:04 +00:00 · 2026-06-19 18:19:03 +03:00
1 changed files with 6 additions and 1 deletions
--- a/tradein-mvp/backend/app/services/scrapers/ekb_geoportal_client.py
+++ b/tradein-mvp/backend/app/services/scrapers/ekb_geoportal_client.py
@ -220,7 +220,12 @@ class EkbGeoportalClient:
        }
        url = f"{GEOPORTAL_HOST}{WFS_PATH}"
        try:
-            async with httpx.AsyncClient(timeout=self._timeout, headers=_BROWSER_HEADERS) as client:
+            # Геопортал ЕКБ отдаёт сертификат российского CA (Минцифры), которого нет в
+            # стандартном trust store httpx → TLS verify падает. Данные публичные,
+            # read-only → verify=False (тот же подход, что curl -k при разведке).
+            async with httpx.AsyncClient(
+                timeout=self._timeout, headers=_BROWSER_HEADERS, verify=False
+            ) as client:
                resp = await client.get(url, params=params)
            if resp.status_code != 200:
                logger.warning("geoportal WFS → HTTP %d for bbox=%s", resp.status_code, bbox)
Author	SHA1	Message	Date
lekss361	fb7b3323e4	Merge pull request 'fix(tradein): verify=False для WFS геопортала ЕКБ (российский CA-серт)' (#1788 ) from fix/tradein-ekb-geoportal-ssl-verify into main Some checks are pending Deploy Trade-In / build-browser (push) Blocked by required conditions Details Deploy Trade-In / deploy (push) Blocked by required conditions Details Deploy Trade-In / test (push) Blocked by required conditions Details Deploy Trade-In / build-backend (push) Blocked by required conditions Details Deploy Trade-In / build-frontend (push) Blocked by required conditions Details Deploy Trade-In / changes (push) Successful in 6s Details Reviewed-on: #1788	2026-06-19 16:02:04 +00:00
bot-backend	112e5cc2f1	fix(tradein): verify=False for EKB geoportal WFS (Russian-CA cert) All checks were successful CI / changes (pull_request) Successful in 5s Details CI / backend-tests (pull_request) Has been skipped Details CI / frontend-tests (pull_request) Has been skipped Details CI / openapi-codegen-check (pull_request) Has been skipped Details The geoportal serves a Russian national-CA (Минцифры) TLS cert absent from httpx's default trust store → CERTIFICATE_VERIFY_FAILED, loader fetched 0. Public read-only data → verify=False (same as the curl -k used in recon).	2026-06-19 18:19:03 +03:00