chef / chef/effortless

SSL cacerts wrapper

Open
#184 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Type: Bug
Dominant language
Shell
Stars
35
Forks
35
Avg merge
2d 7h
Merged PRs (30d)
8

Description

Description

Per my success engineer (Stephen Wise), i'm opening this for tracking purposes for SSL cacerts wrapping

Scaffolding Version

0.16.0 of this repo

Platform Version

Running Habitat studio on Windows 10 (1803)

Replication Case

Executing a build in a Windows Habitat Studio (no docker), failed due to validation of SSL while connecting to a on-prem artifactory instance during the InSpec step of the scaffolding, which requires a DigiCert intermediate CA cert. The cert needed is present in the .chef folder, and the system certificate store.
Resolved by creating custom cacert package, and adding wrapper to the effortless package for the SSL_CERT_FILE variable.

Build or Run Output

(did not save the entire run)
SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate) (OpenSSL::SSL::SSLError)

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by examining the effortless package wrapper and the custom cacert package described in the issue; no specific file or test is named. Done means a Windows 10 Habitat Studio build can run the InSpec step against the on-premises Artifactory using the required DigiCert intermediate CA without SSL verification failure.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
build-system, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.