Added "certificate verify failed" error instructions. Fixes #55

docs/troubleshooting.md

@@ -8,17 +8,31 @@
 3. If using Mesh SA, ensure your network supports Multicast. 
 
 
-## `PEM pass phrase:` Prompt
+## `Enter PEM pass phrase:` Prompt
 
-The `PEM pass phrase:` prompt can be the result of using a private-key encrypted (password-protected) **PYTAK_TLS_CLIENT_KEY** file. This is the default behavior of TAK Server's `makeCert.sh` tool. TAK Server's default password is defined in `CoreConfig.xml`.
+The `Enter PEM pass phrase:` prompt can be the result of using a private-key encrypted (password-protected) [**PYTAK_TLS_CLIENT_KEY**](https://pytak.readthedocs.io/en/latest/configuration/#tls-configuration-parameters) file. This is the default behavior of TAK Server's `makeCert.sh` tool. TAK Server's default password is defined in `CoreConfig.xml`.
 
 Depending on the security requirements in your operating environment, there are three possible procedures to choose from to resolve this prompt: 
 
-1. Set the encryption password with the **PYTAK_TLS_CLIENT_PASSWORD** configuration parameter. For example: **PYTAK_TLS_CLIENT_PASSWORD=abc123**
+1. Set the encryption password with the [**PYTAK_TLS_CLIENT_PASSWORD**](https://pytak.readthedocs.io/en/latest/configuration/#tls-configuration-parameters) configuration parameter. For example: **PYTAK_TLS_CLIENT_PASSWORD=abc123**
 2. Remove the PEM pass phrase: `openssl rsa -in pytak.key -out pytak.nopass.key`
 2. Accept this as the way of life and enter a pass phrase every time you restart this software.
 
 
+# `certificate verify failed:` Error
+
+`ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1131)`
+
+The `certificate verify failed` error indicates that PyTAK is the TAK Server is using a certificate that PyTAK does not trust because it cannot be verified. This is the default behavior for TAK Servers built following the TAK Server Setup Guide instructions. 
+
+Alternatively, many organizations have established their own custom Certificate Authority (CA). With this comes the need to propagate & establish the CA's authority throughout the organization, including on end-user devices like smartphones, tablets and computers. 
+
+Depending on the security requirements in your operating environment, there are two possible procedures to follow to resolve this error:
+
+1. Set the [**PYTAK_TLS_CLIENT_CAFILE**](https://pytak.readthedocs.io/en/latest/configuration/#tls-configuration-parameters) configuration parameter to a PEM encoded file containing the custom CA trust chain? root? store? TK
+2. Bypass remote host TLS certificate verification by setting [**PYTAK_TLS_DONT_VERIFY**](https://pytak.readthedocs.io/en/latest/configuration/#tls-configuration-parameters) to True.
+
+
 # Windows Problems
 
 Set DEBUG env var in PowerShell:

pytak/__init__.py

@@ -19,7 +19,7 @@
 :source: <https://github.com/snstac/pytak>
 """
 
-__version__ = "6.2.1"
+__version__ = "6.2.2"
 
 
 from .constants import (  # NOQA