vigil
vigil copied to clipboard
Turning off certificate verification
Is it possible to turn off SSL certificate verification via config the file? This would be helpful for development.
Also, changing the certificate doesn't seem to make a difference. I'm using the following Dockerfile but still get a SSL error:
(DEBUG) - prober poll result was not received for http target: https://jenkins.x.y/static/2c7b0fae/images/jenkins.svg?1636256115 (error: error sending request for url (https://jenkins.x.y/static/2c7b0fae/images/jenkins.svg?1636256115): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1916: (unable to get local issuer certificate))
The Dockerfile:
FROM valeriansaliou/vigil:v1.22.2 AS runner
WORKDIR /usr/src/vigil
COPY ./full_chain.pem /etc/ssl/certs/ca-certificates.crt
CMD [ "vigil", "-c", "/etc/vigil.cfg" ]
EXPOSE 8080
No, it's not possible at the moment.
I have a problem along these lines. I am completely unable to utilize HTTPS replicas, as they all fail certificate validation, Certificates that are otherwise fully publicly trusted (my server uses a LetsEncrypt cert, but Google also does not work)
(DEBUG) - prober poll result was not received for http target: https://www.thekuan.net/?1676066659 (error: error sending request for url (https://www.thekuan.net/?1676066659): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1921: (unable to get local issuer certificate))
(DEBUG) - prober poll result was not received for http target: https://www.google.com/?1676067274 (error: error sending request for url (https://www.google.com/?1676067274): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1921: (unable to get local issuer certificate))