accepting custom cert -failed

AndrewNeo — Thu, 14 Jul 2022 03:58:53 GMT

Have followed this kb however under instance, it is still unable to test successfully when unchecking the trust all certification options under the integrated instance.

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/docker/configure-python-docker-integrations-to-trust-custom-certificates

upon further checking, have noticed the following empty fields. Not sure if it is supposed to be this way or there are some steps performed wrongly.

Re: accepting custom cert -failed

tyler_bailey — Mon, 18 Jul 2022 13:38:02 GMT

Did you add the server configuration key and restart the server? You can verify that the certificate file is being mounted in the container by enabling debug logs, running the /reset_containers command in the playroom (this will restart all of the docker containers on the XSOAR server), and then looking for the `docker run` commands in the server.log. You should see a line similar to this one

2022-07-18 13:21:37.0992 debug docker command: /usr/bin/docker run -i --rm --name demistoserver_pyexec-19aae628-2f7f-49b6-8e2b-48fb671e4688-demistopython1.3-alpine--13 --env HTTP_PROXY= --env http_proxy= --env HTTPS_PROXY= --env https_proxy= --log-driver json-file --log-opt max-size=2m -v /var/lib/demisto/python-ssl-certs.pem:/etc/custom-python-ssl/certs.pem:ro,z --env REQUESTS_CA_BUNDLE=/etc/custom-python-ssl/certs.pem --env SSL_CERT_FILE=/etc/custom-python-ssl/certs.pem -v /usr/local/demisto/res/_script_docker_python_loop.py:/tmp/pyrunner/_script_docker_python_loop.py:ro -v /var/lib/demisto/temp/script1815803324:/var/lib/demisto:Z -w /var/lib/demisto demisto/python:1.3-alpine python /tmp/pyrunner/_script_docker_python_loop.py (source: /builds/GOPATH/src/code.pan.run/xsoar/server/services/automation/container.go:326)

In this output we can see that the certificate file is being mounted into the container and the environment variables REQUEST_CA_BUNDLE and SSL_CERT_FILE being set with these options

-v /var/lib/demisto/python-ssl-certs.pem:/etc/custom-python-ssl/certs.pem:ro,z --env REQUESTS_CA_BUNDLE=/etc/custom-python-ssl/certs.pem --env SSL_CERT_FILE=/etc/custom-python-ssl/certs.pem

Also, you should indeed see the environment variables configured when running the !CertificatesTroubleshoot command.

topic accepting custom cert -failed in Cortex XSOAR Discussions

accepting custom cert -failed

Re: accepting custom cert -failed