[chef] Re: Re: Re: knife ec2 problem on windows: Unable to verify certificate

[Daniel DeLeo < >]

On Tuesday, June 10, 2014 at 2:10 PM, Jeppe Nejsum Madsen wrote:
> Hi,
>  
> Yes, setting the SSL_CERT_FILE manually solves the problem but would rather 
> avoid to add this if possible.
>  
> I'm wondering though, why it doesn't find the file automatically, as that 
> seems to be the purpose of the code?
>  
> We're using the omnibus installer (just upgraded to 11.12.8), but also 
> bundler for the various knife plugins. Is this mix causing a problem?
>  
> /Jeppe
Chef automatically configures its own HTTP (e.g., Chef::HTTP and Chef::REST 
classes) client via the code I linked, but it doesn’t configure other HTTP 
client code, such as fog (excon library). For reasons I don’t recall (I’ll 
ask my colleagues), Ruby on windows either can’t or doesn’t configure a 
default location to find the certificate bundle, so you have to specify the 
path manually at runtime. This is different than on Unix where we configure 
OpenSSL to use the embedded certificate bundle by default.


--  
Daniel DeLeo