SSL cacerts wrapper
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 35
- Forks
- 35
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 8
Description
Description
Per my success engineer (Stephen Wise), i'm opening this for tracking purposes for SSL cacerts wrapping
Scaffolding Version
0.16.0 of this repo
Platform Version
Running Habitat studio on Windows 10 (1803)
Replication Case
Executing a build in a Windows Habitat Studio (no docker), failed due to validation of SSL while connecting to a on-prem artifactory instance during the InSpec step of the scaffolding, which requires a DigiCert intermediate CA cert. The cert needed is present in the .chef folder, and the system certificate store.
Resolved by creating custom cacert package, and adding wrapper to the effortless package for the SSL_CERT_FILE variable.
Build or Run Output
(did not save the entire run)
SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate) (OpenSSL::SSL::SSLError)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by examining the effortless package wrapper and the custom cacert package described in the issue; no specific file or test is named. Done means a Windows 10 Habitat Studio build can run the InSpec step against the on-premises Artifactory using the required DigiCert intermediate CA without SSL verification failure.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- shell
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100