alpine-docker / multi-arch-docker-images

mutli-arch docker images, such as linux/arm/v7,linux/arm64/v8,linux/arm/v6,linux/amd64,linux/ppc64le,linux/s390x
https://hub.docker.com/orgs/alpine
GNU General Public License v3.0
17 stars 4 forks source link

SSL issue on 3.2.2 image #9

Closed tina-junold closed 3 months ago

tina-junold commented 3 months ago

Hi,

with the new image (3.2.2), i've got ssl issues:

docker run -it --rm --entrypoint "" alpine/httpie sh
/ # https --ignore-stdin --check-status https://some.domain.tld/path

https: error: SSLError: HTTPSConnectionPool(host='some.domain.tld', port=443): Max retries exceeded with url: /path (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)'))) while doing a GET request to URL: https://some.domain.tld/path

I've tried the 3.2.1 image and it worked fine.

sergsadovyi commented 3 months ago

have the same issue in my CI pipeline

MinaMeh commented 3 months ago

in the new version ssl verification is on by default, you need to add --verify=no this solved my problem

ozbillwang commented 3 months ago

Thanks for the update, seems there is nothing to do with the image.

i have reported the issue to httpie, please follow

https://discord.com/channels/725351238698270761/799982808122523648/1247527863016493156

tina-junold commented 3 months ago

@MinaMeh

The cert was valid and for sure i want to verify the certificate ^^. In Addition: I can't access the discord channel

 * SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256 / x25519 / RSASSA-PSS
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=some.domain.tld
*  start date: Jul 31 00:00:00 2023 GMT
*  expire date: Aug 28 23:59:59 2024 GMT
*  subjectAltName: host "some.domain.tld" matched cert's "*.domain.tld"
*  issuer: C=US; O=Amazon; CN=Amazon RSA 2048 M01
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 2: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption