Allow Bypassing of SSL Cert Validation on Self-Hoster Runners
See original GitHub issueDescribe the enhancement
Allow bypassing SSL certificate validation
Additional information
When a proxy server does SSL inspection, it does a sort of “man in the middle” action with certificates, such that the certs for github.com come back as being signed from an internal CA.
Even when using the --sslskipcertvalidation
flag, it reports:
[2020-01-16 15:54:33Z] System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
Issue Analytics
- State:
- Created 4 years ago
- Comments:10 (2 by maintainers)
Top Results From Across the Web
Disable SSL verification when accessing git server with a ...
I can run git config --global http.sslverify false within the asset-files-api pod to disable SSL verification, but this setting is get reset ...
Read more >Four Ways to Bypass Android SSL Verification and ...
In this blog I'll go through 4 techniques you can use to bypass SSL certificate checks on Android: Adding a custom CA to...
Read more >How to ignore invalid and self signed ssl connection errors ...
I wanted to curl command to ignore SSL certification warning. Does curl command have a --no-check-certificate option like wget command on ...
Read more >Self-signed certificates or custom Certification Authorities
This error occurs when the Docker host or Kubernetes node where the runner schedules the executors does not trust the certificate used by...
Read more >How to bypass ssl certificate checking in java
I want access a SOAP webservice url having https hosted in a remote vm. I am getting an exception while accessing it using...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
export DOTNET_SYSTEM_NET_HTTP_USESOCKETSHTTPHANDLER=0
We ended up getting network exceptions from our security team to stop doing their MITM cert inspection on our action runner for most things, so not sure how accurate my solution still is.
We were setting these in the actions workflow, for example on a step:
Or for builtin steps that used node:
Where
/etc/ssl/certs/ca-bundle.crt
is the bundle that has our internal certs.@deutmeyerbrianpfg has done a lot of work with our self hosted runners in our datacenter, he might be able to comment further.