HenryGP / om_ansible

Minimalistic, disposable Ops Manager environment with Ansible
19 stars 17 forks source link

https on - automation fails to download binaries - ca.pem should include mongodb.com CA certs #38

Closed emisca closed 4 years ago

emisca commented 5 years ago

on om_ansible, when https support is added the automation agent uses sslTrustedMMSServerCertificate=/certs/ca.pem you need to add to the ca pem file the ca certs to connect to mongodb.com

or you will get [2019/10/10 12:54:06.795] [.error] [cm/util/download.go:DownloadUngzipUntarCustomClient:186] [12:54:06.795] Error downloading url=https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel70-4.2.0.tgz : resp= : Get https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel70-4.2.0.tgz: x509: certificate signed by unknown authority

HenryGP commented 4 years ago

This is also resolved in a recent merge.