nats.cr icon indicating copy to clipboard operation
nats.cr copied to clipboard

TLS with self-signed certificate

Open munjalpatel opened this issue 3 years ago • 0 comments

Hello,

I have NATS server setup using a self-signed certificate. When I try to connect to my cluster, I get the following error:

Unhandled exception: SSL_connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed (OpenSSL::SSL::Error)
  from ../../../../../usr/local/Cellar/crystal/0.35.1_1/src/openssl/ssl/socket.cr:34:11 in 'initialize'
  from ../../../../../usr/local/Cellar/crystal/0.35.1_1/src/openssl/ssl/socket.cr:3:5 in 'new'
  from lib/nats/src/nats/connection.cr:528:7 in 'process_first_info'
  from lib/nats/src/nats/connection.cr:97:7 in 'initialize'
  from lib/nats/src/nats/connection.cr:55:5 in 'new'
  from lib/nats/src/nats/connection.cr:139:7 in 'new'
  from lib/nats/src/nats/connection.cr:131:7 in 'new'
  from src/server.cr:13:13 in 'initialize'
  from src/server.cr:12:5 in 'new'
  from src/identity.cr:6:12 in '__crystal_main'
  from ../../../../../usr/local/Cellar/crystal/0.35.1_1/src/crystal/main.cr:105:5 in 'main_user_code'
  from ../../../../../usr/local/Cellar/crystal/0.35.1_1/src/crystal/main.cr:91:7 in 'main'
  from ../../../../../usr/local/Cellar/crystal/0.35.1_1/src/crystal/main.cr:114:3 in 'main'

How do I correctly specify TLS options?

munjalpatel avatar Oct 19 '20 00:10 munjalpatel