Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save muhozi/3400a74395eb7ef940551a99a511ece0 to your computer and use it in GitHub Desktop.

Select an option

Save muhozi/3400a74395eb7ef940551a99a511ece0 to your computer and use it in GitHub Desktop.
>pip config set global.cert path/to/ca-bundle.crt
>pip config list # user trusted-host
pip.ini or pip.conf
[global]
trusted-host = pypi.python.org
pypi.org
files.pythonhosted.org
cert = /etc/ssl/certs/ca-bundle.crt
(if config is not set, use pip --cert or --trust-host each call)
>conda config --set ssl_verify path/to/ca-bundle.crt (or false to disable)
>conda config --show ssl_verify
>git config --global http.sslVerify true
>git config --global http.sslCAInfo path/to/ca-bundle.crt
>npm config -g set strict-ssl true
>npm config -g set cafile path/to/ca-bundle.crt
>yarn config set strict-ssl true
>yarn config set cafile path/to/ca-bundle.crt
Docker
COPY zscaler-root-ca.crt /usr/local/share/ca-certificates/zscaler-root-ca.crt
RUN update-ca-certificates
# update-ca-certificates - add the cert to /etc/ssl/certs/ca-certificates.crt bundle
#http://manpages.ubuntu.com/manpages/xenial/man8/update-ca-certificates.8.html
https://serverfault.com/questions/62496/ssl-certificate-location-on-unix-linux
"/etc/ssl/certs/ca-certificates.crt", // Debian/Ubuntu/Gentoo etc.
"/etc/pki/tls/certs/ca-bundle.crt", // Fedora/RHEL 6
"/etc/ssl/ca-bundle.pem", // OpenSUSE
"/etc/pki/tls/cacert.pem", // OpenELEC
"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem", // CentOS/RHEL 7
"/etc/ssl/cert.pem", // Alpine Linux
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment