search

fabiolb / fabio

Consul Load-Balancing made simple
https://fabiolb.net
MIT License
7.25k stars 620 forks source link

customized cacert/path #387

Open ragunathp opened 6 years ago

ragunathp commented 6 years ago

Hi, Consul agent is running in "https", while fabio is initializing with consul it gives
"Error initializing backend. Get https://myserver:8543/v1/agent/self: x509: certificate signed by unknown authority. I understand the reason though.

However works fine when I curl --cacert /mycapath/ca.pem https://myserver:8543/v1/agent/self or curl -k https://myserver:8543/v1/agent/self Is it possible to enable such option in fabio ? (its only for DEV test) or is there an option already available?

Thank you.

magiconair commented 6 years ago

Hmm, the root CA path is currently not configurable. fabio will use whatever is in the system path.

ragunathp commented 6 years ago

However, my colleague helped me with the below option and it worked. That is to set CONSUL_HTTP_SSL_VERIFY=false and start Fabio. This helped to avoid the above issue