x509: certificate signed by unknown authority - in offline managed installation

[Josef-t11]

One of our customers (government agency) is using offline managed cluster which we are accessing via customer VPN without access to internet.
I tried to get configuration changes via monaco download (ver 1.5.0) and got the message "x509: certificate signed by unknown authority". Is it possible to add "non check certificate" behavior - e.g. via new parameter ?

BR, Josef Solnicky, TietoEvry

[tatomir146]

Hi @Josef-t11, monaco is using host system trust store to determine if SSL is trusted. If you add self-signed certificate to the hosts trust store, monaco will accept it.

[tatomir146]

We don't plan to add self-signed certificate support to monaco.

[tpnoonan]

I have added our self signed certificate (pem) to the trust store and then updated and verified that the certificate was added along with rebooting the server and I'm still receiving ultimately a "...failed to verify certificate..." from monaco.

I'm using the Linux X64 latest version.

[arthurpitman]

Hi @tpnoonan, as most likely this is dependent on the exact network setup, it would be best to create a support archive and reach out to Dynatrace Support to work through this.

[tpnoonan]

Thank you @arthurpitman, I will do so.

[dcryans]

@tpnoonan
Not sure if you found your answer since March

On Ubuntu running in WSL2, I had to specify this:
export SSL_CERT_DIR=/usr/local/share/ca-certificates/

Golang wouldn't use my installed certs otherwise