Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Chalice health check failing with self signed cert #1421

Closed
davidcorbin opened this issue Jul 25, 2023 · 2 comments
Closed

Chalice health check failing with self signed cert #1421

davidcorbin opened this issue Jul 25, 2023 · 2 comments
Assignees

Comments

@davidcorbin
Copy link

davidcorbin commented Jul 25, 2023

Describe the issue
Chalice HTTPS health check fails when cert root isn't trusted

Steps to reproduce the issue

  1. Setup ingress TLS cert with cert signed by untrusted root

Chalice health check fail logs:

!! health failed: SSL Certificate
HTTPSConnectionPool(host='or-dev.playground.davcor.co', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1002)')))

Expected behavior
I'd like to be able to be able to allow untrusted root certs or be able to configure additional trusted roots in the chalice container.

Screenshots
N/A

OpenReplay Environment

  • Frontend stack: N/A
  • OpenReplay version: v1.14.0
  • Tracker version: v1.14.0
  • Plugins used: N/A
  • Cloud provider: k3s
  • System specs: N/A

Additional context
There doesn't seem to be a way to allow this with the chalice container image. Since TLS is required, users should be able to test OR with valid TLS certs not signed by public CAs.

Thanks!

@davidcorbin davidcorbin added the bug Something isn't working label Jul 25, 2023
@estradino estradino assigned rjshrjndrn and unassigned estradino Jul 25, 2023
@estradino estradino added API deployment and removed bug Something isn't working labels Jul 25, 2023
@rjshrjndrn
Copy link
Contributor

You can fix this by asking chalice to ignore the health check for ssl.

Edit the confiuration using

openreplay -e
chalice:
  env:
    SKIP_H_SSL: true

Save and quit using :wq

Once its done update, you can retry

@rjshrjndrn
Copy link
Contributor

Closing the Issue, due to inactivity. Reopen if you have any questions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants