Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Direct Download - Unable to contain self signed certificate #216

Open
timothyeckert opened this issue Nov 28, 2020 · 0 comments
Open

Direct Download - Unable to contain self signed certificate #216

timothyeckert opened this issue Nov 28, 2020 · 0 comments

Comments

@timothyeckert
Copy link

Due to the use of the Chef Mix Lib install Library, direct downloads are unable to contain self signed certificates.

https://github.com/chef/mixlib-install/blob/master/lib/mixlib/install/generator/bourne/scripts/helpers.sh.erb

Download URL override specified
/tmp/install.sh.3418/chef-14.15.6-1.el7.x86_64.rpm not found
downloading https:///chef-client/14.15.6-1/chef-14.15.6-1.el7.x86_64.rpm
to file /tmp/install.sh.3418/chef-14.15.6-1.el7.x86_64.rpm
trying wget...
trying curl...
trying perl...
trying python...
Unable to retrieve a valid package!
Version: 14.15.6

       Please file a Bug Report at https://github.com/chef/omnitruck/issues/new
       Alternatively, feel free to open a Support Ticket at https://www.chef.io/support/tickets
       More Chef support resources can be found at https://www.chef.io/support

       Please include as many details about the problem as possible i.e., how to reproduce
       the problem (if possible), type of the Operating System and its version, etc.,
       and any other relevant details that might help us with troubleshooting.

       Metadata URL: 
       Download URL: https://<omited url>/chef-client/14.15.6-1/chef-14.15.6-1.el7.x86_64.rpm
       \nDEBUG OUTPUT FOLLOWS:\n\nSTDERR from wget:\n\n--2020-11-28 07:01:59--  https://<omited url>/chef-client/14.15.6-1/chef-14.15.6-1.el7.x86_64.rpm
       Resolving <omited url> (<omited url>)... <local ip>
       Connecting to <omited url> (<omited url>)|<local ip>|:443... connected.
       ERROR: cannot verify <omited url>'s certificate, issued by ‘<self signed issuer>’:
         Self-signed certificate encountered.
       To connect to <omited url> insecurely, use `--no-check-certificate'.\n\nSTDERR from curl:\n\n\n\nSTDERR from perl:\n\nCan't locate LWP/Simple.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at -e line 1.
       BEGIN failed--compilation aborted at -e line 1.\n\nSTDERR from python:\n\nTraceback (most recent call last):
         File "<string>", line 1, in <module>
         File "/usr/lib64/python2.7/urllib2.py", line 154, in urlopen
    return opener.open(url, data, timeout)
         File "/usr/lib64/python2.7/urllib2.py", line 431, in open
    response = self._open(req, data)
         File "/usr/lib64/python2.7/urllib2.py", line 449, in _open
    '_open', req)
         File "/usr/lib64/python2.7/urllib2.py", line 409, in _call_chain
    result = func(*args)
         File "/usr/lib64/python2.7/urllib2.py", line 1258, in https_open
    context=self._context, check_hostname=self._check_hostname)
         File "/usr/lib64/python2.7/urllib2.py", line 1214, in do_open
    raise URLError(err)
       urllib2.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)>\n

       Cookbook Trace:
       ---------------
       /tmp/kitchen/cache/cookbooks/chef_client_updater/providers/default.rb:609:in `execute_install_script'
       /tmp/kitchen/cache/cookbooks/chef_client_updater/providers/default.rb:650:in `block (2 levels) in class_from_file'
       /tmp/kitchen/cache/cookbooks/chef_client_updater/providers/default.rb:644:in `block in class_from_file'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant