https://prefect.io logo
Title
j

Jens

04/12/2023, 9:22 AM
Hi people, I have a problem with connecting an agent to an https-Endpoint. Following Scenario. I Have an Host A and and Host B. Both in the same network. Host A is my Master and Host B my Slave. I try to connect an Agent from Host A to Host B with the PREFECT_API_URL-Config https://xxxxxxxxxxx/api but get the following error ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131) If i curl from Slave to Master all works finde and the certificate is fetched from the System-Truststore. But the agent seemse to not use these truststore and can't verify the certificate. Any Solutions?
d

davzucky

04/13/2023, 8:07 AM
If yuo are using SSL with self hosted. Ensure that on your client you have SSL_CERT_FILE set to your CA cert
j

Jens

04/13/2023, 8:38 AM
It is enough to set the env SSLCERT_DIR to the trust store location with an export?
I mean SSL_CERT_DIR
d

davzucky

04/13/2023, 9:52 AM
Yes it should indeed