saltstack / saltstack/salt

[BUG] SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:877)

Open
#63,045 20 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug expected-behavior needs-triage
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Description
I have a problem with a reading a secret from a vault by salt server via SSL.
Here is error from salt master:
image

SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:877)

When I do the same but from minion jenkins, there is no problem.
Command on minion:
image

and I get good secret from vault.

image

Any ideas?

Please be as specific as possible and give set-up details.

  • VM on VMware

Versions Report
image

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by comparing the Salt master’s vault-over-SSL path with the successful minion Jenkins command and the supplied version report. Investigate the certificate verification failure and determine which environment or configuration differs; done means reproducing the failure and documenting a confirmed fix or a clearly identified missing setup detail.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
devops, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.