Closed stitch closed 6 years ago
This is a bug in the docker container, the file ca-certificates.crt is missing. A new docker will com this month ...
A quick workaround is as follows:
If you're not used to docker, it can be done with o-saft's tools as follows
Hope this helps.
Fixed with Dockerfile
Hi!
Using the docker container, it's not possible to validate if certificates are self signed. The check always results in a "no (num=20:unable to get local issuer certificate)".
Command: ['docker', 'run', '--rm', '-it', 'owasp/o-saft', '--trace-key', '--legacy=quick', '+check', '+selfsigned', 'faalkaart.nl:443']
This results in the following issue with selfsigned on any domain: {'typ': 'check', 'line': '654', 'key': 'selfsigned', 'label': 'Certificate is not self-signed', 'value': 'no (num=20:unable to get local issuer certificate)'}
The documentation gives some hints about some systems not being capable of performing this check. I would imagine the distributed docker container would be configured to be able to check self-signing.
Am i missing something?
Regards, Elger