valeriansaliou / vigil

🚦 Microservices Status Page. Monitors a distributed infrastructure and sends alerts (Slack, SMS, etc.).

Home Page:https://crates.io/crates/vigil-server

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Turning off certificate verification

benstadin opened this issue · comments

Is it possible to turn off SSL certificate verification via config the file? This would be helpful for development.

Also, changing the certificate doesn't seem to make a difference. I'm using the following Dockerfile but still get a SSL error:

(DEBUG) - prober poll result was not received for http target: https://jenkins.x.y/static/2c7b0fae/images/jenkins.svg?1636256115 (error: error sending request for url (https://jenkins.x.y/static/2c7b0fae/images/jenkins.svg?1636256115): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1916: (unable to get local issuer certificate))

The Dockerfile:

FROM valeriansaliou/vigil:v1.22.2 AS runner

WORKDIR /usr/src/vigil

COPY ./full_chain.pem /etc/ssl/certs/ca-certificates.crt

CMD [ "vigil", "-c", "/etc/vigil.cfg" ]

EXPOSE 8080

No, it's not possible at the moment.

I have a problem along these lines. I am completely unable to utilize HTTPS replicas, as they all fail certificate validation, Certificates that are otherwise fully publicly trusted (my server uses a LetsEncrypt cert, but Google also does not work)

(DEBUG) - prober poll result was not received for http target: https://www.thekuan.net/?1676066659 (error: error sending request for url (https://www.thekuan.net/?1676066659): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1921: (unable to get local issuer certificate))

(DEBUG) - prober poll result was not received for http target: https://www.google.com/?1676067274 (error: error sending request for url (https://www.google.com/?1676067274): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1921: (unable to get local issuer certificate))