Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Turning off certificate verification #104

Open
benstadin opened this issue Nov 7, 2021 · 2 comments
Open

Turning off certificate verification #104

benstadin opened this issue Nov 7, 2021 · 2 comments

Comments

@benstadin
Copy link

benstadin commented Nov 7, 2021

Is it possible to turn off SSL certificate verification via config the file? This would be helpful for development.

Also, changing the certificate doesn't seem to make a difference. I'm using the following Dockerfile but still get a SSL error:

(DEBUG) - prober poll result was not received for http target: https://jenkins.x.y/static/2c7b0fae/images/jenkins.svg?1636256115 (error: error sending request for url (https://jenkins.x.y/static/2c7b0fae/images/jenkins.svg?1636256115): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1916: (unable to get local issuer certificate))

The Dockerfile:

FROM valeriansaliou/vigil:v1.22.2 AS runner

WORKDIR /usr/src/vigil

COPY ./full_chain.pem /etc/ssl/certs/ca-certificates.crt

CMD [ "vigil", "-c", "/etc/vigil.cfg" ]

EXPOSE 8080
@valeriansaliou
Copy link
Owner

No, it's not possible at the moment.

@kuantek
Copy link

kuantek commented Feb 10, 2023

I have a problem along these lines. I am completely unable to utilize HTTPS replicas, as they all fail certificate validation, Certificates that are otherwise fully publicly trusted (my server uses a LetsEncrypt cert, but Google also does not work)

(DEBUG) - prober poll result was not received for http target: https://www.thekuan.net/?1676066659 (error: error sending request for url (https://www.thekuan.net/?1676066659): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1921: (unable to get local issuer certificate))

(DEBUG) - prober poll result was not received for http target: https://www.google.com/?1676067274 (error: error sending request for url (https://www.google.com/?1676067274): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1921: (unable to get local issuer certificate))

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants