jfrog / jfrog/frogbot

How do I configure self signed certs with frogbot

Open
#920 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

question
Dominant language
Go
Stars
372
Forks
107
Avg merge
2d 20h
Merged PRs (30d)
5

Description

I need to run frogbot in a self hosted gitlab against a self hosted xray installation that uses self-signed certificates.

I followed the instructions here https://jfrog.com/help/r/jfrog-security-user-guide/shift-left-on-security/frogbot/installation/gitlab-ci

However I get this warning when I run the gitlab pipeline:

...
Frogbot downloaded successfully!

08:40:16 [Info] Frogbot version: 2.27.3

08:40:16 [Warn] (Attempt 1) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority

08:40:16 [Warn] (Attempt 2) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority

08:40:16 [Warn] (Attempt 3) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority

08:40:16 [Warn] (Attempt 4) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority

08:40:16 [Info] executor timeout after 3 attempts with 0 milliseconds wait intervals

08:40:16 [Error] failed while attempting to get JFrog Xray version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
...

How to I configure self signed certs with frogbot.

I already tried putting the certs in .jfrog/security/cert as well as setting SSL_CERT_DIR to that directory.
Please provide a working example of a gitlab config that uses self-signed certs.

--
I additionally created Ticket 370760 with JFrog support.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Frogbot GitLab CI installation instructions and compare the documented certificate locations with .jfrog/security/cert and SSL_CERT_DIR. Reproduce the pipeline against the self-hosted Xray endpoint and trace the certificate configuration used by Frogbot. Done means the pipeline connects without the x509 unknown-authority error; JFrog support ticket 370760 may contain relevant context.

Written by the indexing model from the issue text.

Assessment

Tech stack
gitlab, go
Domain
ci-cd, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.