Using Vagrant login behind a corporate firewall fails

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Using Vagrant login behind a corporate firewall fails

Steve A (MM)
I am using a private vagrant repository and will need to login as part of a CI/CD process.

Testing this on the cli I am getting an error.

The Corp firewall does packet inspection/DLP etc so its basically MITM.
So somewhere we probably need to install the chain of certs so it will be trusted.   

Here is the error I am getting     Thanks   /SteveA



C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/request.rb:758:
in `rescue in transmit': SSL_connect returned=1 errno=0 state=error: certificate verify failed (Rest
Client::SSLCertificateNotVerified)
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:647:in `transmit'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:145:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:52:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
58:in `block in login'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
129:in `with_error_handling'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
49:in `login'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/command.rb
:61:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/lib/vagrant/cli.rb:42:in `execute
'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/lib/vagrant/environment.rb:308:in
 `cli'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/bin/vagrant:138:in `<main>'

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to the Google Groups "Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/358da21b-f14c-4646-9f51-b9599a4df3d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: Using Vagrant login behind a corporate firewall fails

Alvaro Miranda Aguilera
Hello

You can set this variable to the cert file you need to use:

SSL_CERT_FILE

Alvaro

On Thu, Aug 3, 2017 at 10:14 PM, Steve A (MM) <[hidden email]> wrote:
I am using a private vagrant repository and will need to login as part of a CI/CD process.

Testing this on the cli I am getting an error.

The Corp firewall does packet inspection/DLP etc so its basically MITM.
So somewhere we probably need to install the chain of certs so it will be trusted.   

Here is the error I am getting     Thanks   /SteveA



C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/request.rb:758:
in `rescue in transmit': SSL_connect returned=1 errno=0 state=error: certificate verify failed (Rest
Client::SSLCertificateNotVerified)
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:647:in `transmit'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:145:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:52:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
58:in `block in login'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
129:in `with_error_handling'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
49:in `login'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/command.rb
:61:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/lib/vagrant/cli.rb:42:in `execute
'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/lib/vagrant/environment.rb:308:in
 `cli'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/bin/vagrant:138:in `<main>'

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to the Google Groups "Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/358da21b-f14c-4646-9f51-b9599a4df3d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
Alvaro

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to the Google Groups "Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/CAHqq0ez%3DKBDx6xdKx-u3XGDfog0X5A29BboBZ8D4J7vLDO%2BQDw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: Using Vagrant login behind a corporate firewall fails

Steve A (MM)
Thanks

On Mon, Aug 7, 2017 at 3:17 AM, Alvaro Miranda Aguilera <[hidden email]> wrote:
Hello

You can set this variable to the cert file you need to use:

SSL_CERT_FILE

Alvaro

On Thu, Aug 3, 2017 at 10:14 PM, Steve A (MM) <[hidden email]> wrote:
I am using a private vagrant repository and will need to login as part of a CI/CD process.

Testing this on the cli I am getting an error.

The Corp firewall does packet inspection/DLP etc so its basically MITM.
So somewhere we probably need to install the chain of certs so it will be trusted.   

Here is the error I am getting     Thanks   /SteveA



C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/request.rb:758:
in `rescue in transmit': SSL_connect returned=1 errno=0 state=error: certificate verify failed (Rest
Client::SSLCertificateNotVerified)
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:647:in `transmit'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:145:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/rest-client-2.0.2-x64-mingw32/lib/restclient/re
quest.rb:52:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
58:in `block in login'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
129:in `with_error_handling'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/client.rb:
49:in `login'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/plugins/commands/login/command.rb
:61:in `execute'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/lib/vagrant/cli.rb:42:in `execute
'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/lib/vagrant/environment.rb:308:in
 `cli'
        from C:/HashiCorp/Vagrant/embedded/gems/gems/vagrant-1.9.7/bin/vagrant:138:in `<main>'

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to the Google Groups "Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/358da21b-f14c-4646-9f51-b9599a4df3d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
Alvaro

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to a topic in the Google Groups "Vagrant" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/vagrant-up/TH_WNWsfk3s/unsubscribe.
To unsubscribe from this group and all its topics, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/CAHqq0ez%3DKBDx6xdKx-u3XGDfog0X5A29BboBZ8D4J7vLDO%2BQDw%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to the Google Groups "Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/CAA-5-2AoWaeGS_PiePtt04ASWBbWEwG7ag3oOeZMVWbAgvzELg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.