"self signed certificate in certificate chain" - how to add self-signed cert to trusted store

Hi - Similar to #3230, I’ve just run into the same issue today. I’m using the latest version of Serverless, 1.17.0, and I know exactly what the issue is just not how to correct it.

I’ve recently begun testing deep packet inspection in my network. The firewall is decrypting, inspecting, and re-encrypting my SSL traffic for malware and such. There is a firewall generated, self-signed certificate deployed to the local CA trust store, and for other applications that don’t use the OS’s trust store I’ve had to add the self-signed cert somewhere/somehow.

For example, git requires: git config --global http.sslCAInfo <path to cert.pem>

npm has a similar functionality for adding a reference to the cert or strict checking can be disabled with: npm config set strict-ssl false

So… question is: how might I add or reference the self-signed cert in serverless?

Serverless: Packaging service...
  Serverless Error ---------------------------------------
  ServerlessError: self signed certificate in certificate chain
  Get Support --------------------------------------------
     Docs:          docs.serverless.com
     Bugs:          github.com/serverless/serverless/issues
     Forums:        forum.serverless.com
     Chat:          gitter.im/serverless/serverless
  Your Environment Information -----------------------------
     OS:                     win32
     Node Version:           6.10.3
     Serverless Version:     1.17.0

In the serverless documentation for OpenWhisk, there is a reference to a property of the provider called “ignore_certs” that can be set to true. I’m using AWS, but tried this anyway and it did not change the result. https://serverless.com/framework/docs/providers/openwhisk/guide/credentials/#register-with-openwhisk-platform-self-hosted

Any suggestions would be greatly appreciated.

Cheers! Bryan

[snnehal]

Hi, I am still facing this issue in 2019. What is the solution ? I am behind a corporate firewall and on windows. I have tried -

1. Installing the aws cli, configuring it and then trying serverless deploy
2. SET NODE_TLS_REJECT_UNAUTHORIZED=0, upgraded npm. 3.secureendpoint: false in serverless.yml

none of these have worked. Please help.

serverless deploy Serverless: Packaging service… Serverless: Excluding development dependencies… Serverless: Recoverable error occurred (self signed certificate in certificate chain), sleeping for 5 seconds. Try 1 of 4 Serverless: Recoverable error occurred (self signed certificate in certificate chain), sleeping for 5 seconds. Try 2 of 4 Serverless: Recoverable error occurred (self signed certificate in certificate chain), sleeping for 5 seconds. Try 3 of 4 Serverless: Recoverable error occurred (self signed certificate in certificate chain), sleeping for 5 seconds. Try 4 of 4

Serverless Error ---------------------------------------

ServerlessError: self signed certificate in certificate chain

Get Support -------------------------------------------- Docs: docs.serverless.com Bugs: github.com/serverless/serverless/issues Issues: forum.serverless.com

Your Environment Information --------------------------- Operating System: win32 Node Version: 8.11.2 Serverless Version: 1.49.0 Enterprise Plugin Version: 1.3.8 Platform SDK Version: 2.1.0

[bence-takacs]

There is an existing workaround: export NODE_TLS_REJECT_UNAUTHORIZED=0 sls deploy But the issue still persists in serverless 1.26.1