openwallet-foundation / acapy

ACA-Py is a foundation for building decentralized identity applications and services running in non-mobile environments.
https://aca-py.org
Apache License 2.0
420 stars 513 forks source link

Error: (<class 'aiohttp.client_exceptions.ClientConnectorCertificateError'>, ClientConnectorCertificateError(ConnectionKey #3225

Open jasbir-s-minhas opened 2 months ago

jasbir-s-minhas commented 2 months ago

Environment:

Issuer and Holder Acapy images: repository: bcgovimages/aries-cloudagent tag: py3.12_1.0.0

Helm Chart / Kubernetes (Server Version: v1.29.6) Wallet-type: Askar Database: Postgres

Encountering the following error in holder when POST [/out-of-band/create-invitation] Create a new connection invitation

Error: (<class 'aiohttp.client_exceptions.ClientConnectorCertificateError'>, ClientConnectorCertificateError(ConnectionKey(host='xxxxx', port=443, is_ssl=True, ssl=True, proxy=None, proxy_auth=None, proxy_headers_hash=None), SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)')),

Question... 1> is there a way to temporarily disable SSL verification as this is a test environment? Setting SSL_NO_VERIFY=true in K8s deployment did not help.

2> How to fix the cert error.