-
Notifications
You must be signed in to change notification settings - Fork 38
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
PLAT-10817: documented how to solve self signed certificate issues #182
Conversation
docsrc/markdown/known_issues.md
Outdated
@@ -0,0 +1,49 @@ | |||
# Known issues |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would not call it an issue but a workaround 😛
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should FAQ be a better name ?
docsrc/markdown/known_issues.md
Outdated
|
||
```yaml | ||
ssl: | ||
trustStore: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Would adding the certificate to the system keychain be a workaround too?
docsrc/markdown/known_issues.md
Outdated
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1123) | ||
``` | ||
|
||
means your pod uses a self-signed certificate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does it mean that develop2 is a self signed certificate? It appears ok here: https://www.sslshopper.com/ssl-checker.html#hostname=https://develop2.symphony.com
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is strange indeed... I will update the sentence.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actually with https://www.ssllabs.com/ssltest/analyze.html?d=develop2.symphony.com&latest the last digicert in the chain is indeed marked as self signed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
An alternative would be to support an insecure flag (similar to curl -k) but I'm not a big fan of supporting this
* Updated documentation about slash commands (#181) * PLAT-10817: documented how to solve self signed certificate issues (#182) * PLAT-10817: documented how to solve self signed certificate issues * Updated poetry deps * PLAT-10564: Documentation of User Joined Room activity (#183) * Added missing user joined room activity * Updated links to the developers documentation in markdown doc * PLAT-10710: Implement the retry mechanism (#180) * PLAT-10710 Add global and Datafeed retry configuration * PLAT-10710 Add modified implementation of tenacity.AsyncRetrying handling asynchronously defined retry callbacks * PLAT-10710 Create a custom retry decorator to fetch the retry configuration from each service instance * PLAT-10710 Add retry decorator to services * PLAT-10695 AsyncIO/Proxy usage on Windows (#184) * PLAT-10695 AsyncIO/Proxy usage on Windows Default event loop policy has to be changed on Windows + Python 3.8 if a proxy is used. Goal of this PR is to make sure that if these conditions applies our BDK 2.0 examples will still be working as expected, by setting the event loop policy correctly. * Security review fixes for Python BDK 2.0 (#185) * PLAT-10870 removed useless self assigment * PLAT-10867 removed Potential Leak of sensitive information on logs * PLAT-10862 removed Useless self assigment * PLAT-10885: removed legacy folder from 2.0 branch (#190) * PLAT-10829: Added a Message class to make the sending of message easier (#187) * Updated poetry deps * PLAT-10829: Added Message class to ease message sending * PLAT-10866 PLAT-10869 (#191) * PLAT-10866: Replaced native xml lib by defusedxml * PLAT-10869: Improved conditional structure in model_utils * PLAT-10789 Make bot username and appId mandatory in configuration (#189) * PLAT-10789 Make Bot username and appId mandatory in configuation Goal of this PR is to make the bot username field mandatory in the configuration file while trying to configure a bot. Same behaviour is been implemented for the appId when app is found in the config * PLAT-10698: Bumped version to 2.0b3 Co-authored-by: symphony-youness <76746033+symphony-youness@users.noreply.github.com> Co-authored-by: Mariacristina De Dominicis <65179248+symphony-mariacristina@users.noreply.github.com> Co-authored-by: Soufiane Aourinmouche <52406574+symphony-soufiane@users.noreply.github.com>
* Updated documentation about slash commands (finos#181) * PLAT-10817: documented how to solve self signed certificate issues (finos#182) * PLAT-10817: documented how to solve self signed certificate issues * Updated poetry deps * PLAT-10564: Documentation of User Joined Room activity (finos#183) * Added missing user joined room activity * Updated links to the developers documentation in markdown doc * PLAT-10710: Implement the retry mechanism (finos#180) * PLAT-10710 Add global and Datafeed retry configuration * PLAT-10710 Add modified implementation of tenacity.AsyncRetrying handling asynchronously defined retry callbacks * PLAT-10710 Create a custom retry decorator to fetch the retry configuration from each service instance * PLAT-10710 Add retry decorator to services * PLAT-10695 AsyncIO/Proxy usage on Windows (finos#184) * PLAT-10695 AsyncIO/Proxy usage on Windows Default event loop policy has to be changed on Windows + Python 3.8 if a proxy is used. Goal of this PR is to make sure that if these conditions applies our BDK 2.0 examples will still be working as expected, by setting the event loop policy correctly. * Security review fixes for Python BDK 2.0 (finos#185) * PLAT-10870 removed useless self assigment * PLAT-10867 removed Potential Leak of sensitive information on logs * PLAT-10862 removed Useless self assigment * PLAT-10885: removed legacy folder from 2.0 branch (finos#190) * PLAT-10829: Added a Message class to make the sending of message easier (finos#187) * Updated poetry deps * PLAT-10829: Added Message class to ease message sending * PLAT-10866 PLAT-10869 (finos#191) * PLAT-10866: Replaced native xml lib by defusedxml * PLAT-10869: Improved conditional structure in model_utils * PLAT-10789 Make bot username and appId mandatory in configuration (finos#189) * PLAT-10789 Make Bot username and appId mandatory in configuation Goal of this PR is to make the bot username field mandatory in the configuration file while trying to configure a bot. Same behaviour is been implemented for the appId when app is found in the config * PLAT-10698: Bumped version to 2.0b3 Co-authored-by: symphony-youness <76746033+symphony-youness@users.noreply.github.com> Co-authored-by: Mariacristina De Dominicis <65179248+symphony-mariacristina@users.noreply.github.com> Co-authored-by: Soufiane Aourinmouche <52406574+symphony-soufiane@users.noreply.github.com>
Ticket
PLAT-10817
Description
Documented how to solve SSL issues
Checklist