Giters

blst-security / cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

Home Page:https://www.blstsecurity.com/cherrybomb

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Cherrybomb error - Invalid peer certificate: Expired

abnair24 opened this issue · comments

commented

Describe the bug

on executing cherrybomb cli, below error is observed

━━━┳╮╱╱╱╱╱╱╱╱╱╱╱╱╭╮╱╱╱╱╱╱╱╭╮
┃╭━╮┃┃╱╱╱╱╱╱╱╱╱╱╱╱┃┃╱╱╱╱╱╱╱┃┃
┃┃╱╰┫╰━┳━━┳━┳━┳╮╱╭┫╰━┳━━┳╮╭┫╰━╮
┃┃╱╭┫╭╮┃┃━┫╭┫╭┫┃╱┃┃╭╮┃╭╮┃╰╯┃╭╮┃
┃╰━╯┃┃┃┃┃━┫┃┃┃┃╰━╯┃╰╯┃╰╯┃┃┃┃╰╯┃
╰━━━┻╯╰┻━━┻╯╰╯╰━╮╭┻━━┻━━┻┻┻┻━━╯
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╭━╯┃
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╰━━╯ v1.0.1

Error: error sending request for url (https://cherrybomb.blstsecurity.com/tel): error trying to connect: invalid peer certificate: Expired

Caused by:
0: error trying to connect: invalid peer certificate: Expired
1: invalid peer certificate: Expired

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: mac
  • Version 1.o.1

Additional context
Add any other context about the problem here.

commented

#I am getting the same error:

cherrybomb -v debug --file ./api-docs.json --profile passive

╭━━━┳╮╱╱╱╱╱╱╱╱╱╱╱╱╭╮╱╱╱╱╱╱╱╭╮
┃╭━╮┃┃╱╱╱╱╱╱╱╱╱╱╱╱┃┃╱╱╱╱╱╱╱┃┃
┃┃╱╰┫╰━┳━━┳━┳━┳╮╱╭┫╰━┳━━┳╮╭┫╰━╮
┃┃╱╭┫╭╮┃┃━┫╭┫╭┫┃╱┃┃╭╮┃╭╮┃╰╯┃╭╮┃
┃╰━╯┃┃┃┃┃━┫┃┃┃┃╰━╯┃╰╯┃╰╯┃┃┃┃╰╯┃
╰━━━┻╯╰┻━━┻╯╰╯╰━╮╭┻━━┻━━┻┻┻┻━━╯
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╭━╯┃
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╰━━╯       v1.0.0

Sending telemetry data to Cherrybomb servers
Getting telemetry token
Error: error sending request for url (https://cherrybomb.blstsecurity.com/tel): error trying to connect: The certificate was not trusted.

Caused by:
    0: error trying to connect: The certificate was not trusted.
    1: The certificate was not trusted.

MacOS Ventura 13.6 (22G120) on Intel

commented

Hello @andyaspellclark-moj @abnair24 , and for thank for raising this issue. We are @GuyL99 working on it, for the moment please disable telemetry by sending the argument --no-telemetry with cherrybomb

commented

thats fixed that issue, thanks

commented

adding --no-telemetry now allows cherrybomb to run on my local machine, but trying to install and run it in our pipeline is failing with invalid certificate now.

commented

I close this issue we fixed the certificate.