Unable to use on Google App Engine because of six' http_client

[zbuc]

six.moves.http_client seems to handle the Host header manually.

Google App Engine doesn't like the Host header being set manually: https://cloud.google.com/appengine/docs/python/outbound-requests

For security reasons, the following headers cannot be modified by the application:

Content-Length
Host
Vary
Via
X-Appengine-Inbound-Appid
X-Forwarded-For
X-ProxyUser-IP

The end result is that you get an error in your log and all your requests 404:

WARNING 2016-12-27 16:54:18,604 urlfetch_stub.py:550] Stripped prohibited headers from URLFetch request: ['Host']

I don't have a recommendation for a fix right now (I am using my own implementation as a workaround), but wanted to make sure this issue was captured as the Python API client seems broken on GAE.

[zbuc]

The warning may be caused by lines 182-186 in client.py:

        headers = {
            'Authorization': auth,
            'Date': now,
            'Host': self.host,
        }

[BradleyHiggins]

GAE issues a warning when the 'Host' header is set, but that's not the root issue.

Pre-Python 2.7.9, HTTPSConnection didn't do any certificate validation. This was fixed in duo_client_python (which supports versions of python older than 2.7.9) with CertValidatingHTTPSConnection, implemented in https_wrapper.py, which uses raw sockets to handle the SSL handshake and validate the certificate. Raw sockets are special in GAE.

I tried a little bit to figure out what's going on with the raw sockets on my local dev instance of GAE. Unfortunately, I wasn't able to get a successful connection.

[AaronAtDuo]

Closing out this old issue