[BUG] ##[error]unable to get local issuer certificate

Describe the bug

The action is no longer connecting to our Vault server.

To Reproduce

1. Add your build.yaml workflow
2. Add this step:

- name: Import Secrets from Vault
  id: vault_secrets
  uses: hashicorp/vault-action@master
  with:
    url: ${{ secrets.VAULT_ADDR }}
    method: github
    githubToken: ${{ secrets.VAULT_ACCESS_TOKEN }}
    kv-version: 2
    exportEnv: false
    secrets: |
      mysecret MY_SECRET;

Note: The vault address’s SSL cert is still valid until next year

Expected behavior

It will then show an error: ##[error]unable to get local issuer certificate

Log Output

##[debug]'
##[debug]Loading env
Run RichiCoder1/vault-action@master
  with:
    url: ***
    method: github
    githubToken: ***
    kv-version: 2
    exportEnv: false
    secrets: mysecret MY_SECRET;
  
    tlsSkipVerify: false
::group::Test Get Vault Secrets
Test Get Vault Secrets
  
  
  ##[debug]Retrieving Vault Token from v1/auth/github/login endpoint
  ::endgroup::
##[error]unable to get local issuer certificate
##[debug]Node Action run completed with exit code 1
##[debug]Finishing: Import Secrets from Vault

Additional context

We managed to fix it by sticking to the previous working version: RichiCoder1/vault-action@v1.0.1 or hashicorp/vault-action@v1.0.1 and not using master version

[jasonodonnell]

@tamipangadil Was your original issue resolved with newer commits of vault-action? Looking to close this issue.

[tirelibirefe]

nope, the problem still exists in Dec.2022. TLS enabled Vault doesn’t work on EKS.

http: TLS handshake error from 10.61.20.41:33356: remote error: tls: bad certificate