jfrog
How do I configure self signed certs with frogbot
I need to run frogbot in a self hosted gitlab against a self hosted xray installation that uses self-signed certificates.
I followed the instructions here https://jfrog.com/help/r/jfrog-security-user-guide/shift-left-on-security/frogbot/installation/gitlab-ci
However I get this warning when I run the gitlab pipeline:
...
Frogbot downloaded successfully!
08:40:16 [Info] Frogbot version: 2.27.3
08:40:16 [Warn] (Attempt 1) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Warn] (Attempt 2) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Warn] (Attempt 3) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Warn] (Attempt 4) - Failure occurred while sending GET request to https://myserver/xray/api/v1/system/version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
08:40:16 [Info] executor timeout after 3 attempts with 0 milliseconds wait intervals
08:40:16 [Error] failed while attempting to get JFrog Xray version: Get "https://myserver/xray/api/v1/system/version": tls: failed to verify certificate: x509: certificate signed by unknown authority
...
How to I configure self signed certs with frogbot.
I already tried putting the certs in .jfrog/security/cert as well as setting SSL_CERT_DIR to that directory. Please provide a working example of a gitlab config that uses self-signed certs.
-- I additionally created Ticket 370760 with JFrog support.
Hello,
I was in the same situation and to overcome this problem i had to build another docker with the .crt already in it in /etc/ssl/certs.
I also directly put the frogbot in it.
An --tls-insure option would be cool.
