SSL Setup: Gate Readiness probe failed: ssl_client: localhost: certificate verification failed: unable to get local issuer certificate wget: error getting response: Connection reset by peer


#1


I’m running into the following errors using a self signed certification with our SSL Spinnaker.

The Gate service Readiness probe fails with:
SSL Setup: Gate Readiness probe failed: ssl_client: localhost: certificate verification failed: unable to get local issuer certificate wget: error getting response: Connection reset by peer


#2

Could you give some context for these errors. Are these errors in the logs? For which service? What action(s) causes the errors? What is your deployment environment?


#3

After a hal deploy apply to apply the SSL configs to Spinnaker, the Gate service fails with the following.
SSL Setup: Gate Readiness probe failed: ssl_client: localhost: certificate verification failed: unable to get local issuer certificate wget: error getting response: Connection reset by peer


#4

What is your deployment environment? And would you mind posting the relevant hal config parts?


#5

Thanks for taking a look at this. I haven’t been able to make any traction. I appreciate any help. We’re trying to spin up a production type env to get sign off from security.
security:
apiSecurity:
ssl:
enabled: true
keyAlias: spinnaker
keyStore: /home/username/.hal/certs/keystore.jks
keyStoreType: jks
keyStorePassword: xxxxxxxxxx
trustStore: /home/username/.hal/certs/keystore.jks
trustStoreType: jks
trustStorePassword:xxxxxxxxxx
overrideBaseUrl: https://xxxxxxxxxx:8084
uiSecurity:
ssl:
enabled: true
sslCertificateFile: /home/username/.hal/certs/server.crt
sslCertificateKeyFile: /home/username/.hal/certs/server.key
sslCertificatePassphrase: xxxxxxxxxx
overrideBaseUrl: https://xxxxxxxxxx:9000


#6

This ended up being a bug fixed with Hal 1.11 <


#7

Great to hear!