ignore self signed certificate issue in request-promise

[jkjha]

I am using request-promise module for my node app to make some API call. https://www.npmjs.com/package/request-promise

import request from 'request-promise';
let options = {
                method: GET,
                json: true,
                uri : "https://" +this.urls + endpoint,
                body: payload,
                rejectUnauthorized: false // This doesn't work
            };

let response = await request(options)

SInce the API what I am trying to use is insecure (having self signed certificate), the conncetion is failing with this error:

Error: connect ECONNREFUSED
I know with "request" module, we could pass rejectUnauthorized: false , to handle such case. I am not sure how can I pass such option with request-promise module.

[ecdeveloper]

Add insecure: true to your options. So it looks like

let options = {
                method: GET,
                json: true,
                uri : "https://" +this.urls + endpoint,
                body: payload,
                insecure: true
            };

[analog-nico]

@ecdeveloper Thanks for helping out! Quick question: Where did you find this option? Is it one that request forwards to the internal node libraries and which is documented in the node.js docs?

@jkjha Just in case insecure: true doesn’t work have a look at the section about agentOptions in the request README. It explicitly mentions the case of using self-signed certificates. Btw, all options for request work for request-promise as well.

[ajaysaini-sgvu]

+1

[Elyx0]

Having the same issue, insecure true didn't solve it but rejectUnauthorized: false did

[zglozman]

So I need to implement access to an mTLS protected resourcese, that means in neeed to provide the the CA which signed the service i am trying to access, as well as my own certificate and privateKey. what would use for that?

[longbowww]

Having the same issue, insecure true didn't solve it but rejectUnauthorized: false did

does nothing for me, i just get a different kind of error - still saying self signed

[rhulha]

Adding both options seems to work for me :)

[omaracrystal]

strictSSL: false

worked for me

And also making sure that json: true was taken out... or commented out

[iAbhinav]

This works for me in request.get

request.get(url, {rejectUnauthorized: false}, function(err, res, body)