How do I configure self signed certs with frogbot
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 372
- Forks
- 107
- Avg merge
- 2d 20h
- Merged PRs (30d)
- 5
Description
I need to run frogbot in a self hosted gitlab against a self hosted xray installation that uses self-signed certificates.
I followed the instructions here https://jfrog.com/help/r/jfrog-security-user-guide/shift-left-on-security/frogbot/installation/gitlab-ci
However I get this warning when I run the gitlab pipeline:
...
Frogbot downloaded successfully!
08:40:16 [Info] Frogbot version: 2.27.3
08:40:16 [Warn] (Attempt 1) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Warn] (Attempt 2) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Warn] (Attempt 3) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Warn] (Attempt 4) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Info] executor timeout after 3 attempts with 0 milliseconds wait intervals
08:40:16 [Error] failed while attempting to get JFrog Xray version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
...
How to I configure self signed certs with frogbot.
I already tried putting the certs in .jfrog/security/cert as well as setting SSL_CERT_DIR to that directory.
Please provide a working example of a gitlab config that uses self-signed certs.
--
I additionally created Ticket 370760 with JFrog support.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Frogbot GitLab CI installation instructions and compare the documented certificate locations with .jfrog/security/cert and SSL_CERT_DIR. Reproduce the pipeline against the self-hosted Xray endpoint and trace the certificate configuration used by Frogbot. Done means the pipeline connects without the x509 unknown-authority error; JFrog support ticket 370760 may contain relevant context.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- gitlab, go
- Domain
- ci-cd, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100