Respect requests adapter verify option

Author: KostyaEsmukov

hyper/contrib.py

@@ -15,7 +15,7 @@
     HTTPAdapter = object
 
 from hyper.common.connection import HTTPConnection
-from hyper.compat import urlparse
+from hyper.compat import urlparse, ssl
 from hyper.tls import init_context
 
 
@@ -29,7 +29,7 @@ def __init__(self, *args, **kwargs):
         #: A mapping between HTTP netlocs and ``HTTP20Connection`` objects.
         self.connections = {}
 
-    def get_connection(self, host, port, scheme, cert=None):
+    def get_connection(self, host, port, scheme, cert=None, verify=True):
         """
         Gets an appropriate HTTP/2 connection object based on
         host/port/scheme/cert tuples.
@@ -40,22 +40,29 @@ def get_connection(self, host, port, scheme, cert=None):
             port = 80 if not secure else 443
 
         ssl_context = None
-        if cert is not None:
+        if not verify:
+            verify = False
             ssl_context = init_context(cert=cert)
+            ssl_context.check_hostname = False
+            ssl_context.verify_mode = ssl.CERT_NONE
+        elif verify is True and cert is not None:
+            ssl_context = init_context(cert=cert)
+        elif verify is not True:
+            ssl_context = init_context(cert_path=verify, cert=cert)
 
         try:
-            conn = self.connections[(host, port, scheme, cert)]
+            conn = self.connections[(host, port, scheme, cert, verify)]
         except KeyError:
             conn = HTTPConnection(
                 host,
                 port,
                 secure=secure,
                 ssl_context=ssl_context)
-            self.connections[(host, port, scheme, cert)] = conn
+            self.connections[(host, port, scheme, cert, verify)] = conn
 
         return conn
 
-    def send(self, request, stream=False, cert=None, **kwargs):
+    def send(self, request, stream=False, cert=None, verify=True, **kwargs):
         """
         Sends a HTTP message to the server.
         """
@@ -64,7 +71,8 @@ def send(self, request, stream=False, cert=None, **kwargs):
             parsed.hostname,
             parsed.port,
             parsed.scheme,
-            cert=cert)
+            cert=cert,
+            verify=verify)
 
         # Build the selector.
         selector = parsed.path