Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EB CLI lacks support for use of a certificate bundle to use for HTTPS certificate validation #118

Open
rbracewell opened this issue May 13, 2022 · 0 comments

Comments

@rbracewell
Copy link

With the AWS CLI the environment variable AWS_CA_BUNDLE specifies the path to a certificate bundle to use for HTTPS certificate validation. The EB CLI does not take this env property into consideration when running. Neither does it support the use of --ca-bundle switch which is also supported by the AWS CLI.

A couple of options are available to resolve the error (both not ideal)
SSLError - SSL validation failed for https://elasticbeanstalk.us-west-2.amazonaws.com/ [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain

  1. Specify the switch --no-verify-ssl which will skip SSL certificate verification.
  2. The EB CLI uses the certifi package for SSL verification. Manually overriding the cacert.pem within the package on the filesystem resolves the error.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant