search

awslabs / aws-lambda-powershell-runtime

This new PowerShell custom runtime for AWS Lambda makes it even easier to run Lambda functions written in PowerShell to process events.
Apache License 2.0
57 stars 17 forks source link

SSL Error #14

Closed swordfish291 closed 1 year ago

swordfish291 commented 1 year ago

Hello team

I am building a Lambda function that is connected to a VPC. We have Palo Altos in the network and all the traffic passes through firewalls. There is SSL Decrypt in place. When executing the lambda when its not connected to VPC it runs successfully but when executing it while its connected to VPC I am getting below error. Is there a way to add the root CA in the layers so that the functions runs successfully?

"InnerException": "System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: UntrustedRoot\n at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)\n at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)\n at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)\n at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)",

Thanks Abdul

swordfish291 commented 1 year ago

I was able to get around the problem by creating an additional layer with the root CA and adding the environment variable SSL_CERT_FILE with value pointing to the certificate file which gets mounted to /opt as part of the certificate layer.