Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Client Certificate OpenSSL Error #3863

Open
2 tasks done
wobbet opened this issue Jan 22, 2025 · 3 comments
Open
2 tasks done

Client Certificate OpenSSL Error #3863

wobbet opened this issue Jan 22, 2025 · 3 comments
Assignees
Labels
bug Something isn't working

Comments

@wobbet
Copy link

wobbet commented Jan 22, 2025

I have checked the following:

  • I use the newest version of bruno.
  • I've searched existing issues and found nothing related to my issue.

Describe the bug

When using a client certificate whose signing chain is present in the Windows certificate store to send a request to an endpoint that also has the full chain I get the following error message...
Error invoking remote method 'send-http-request': Error: 26873216:error:10000418:SSL routines:OPENSSL_internal:TLSV1_ALERT_UNKNOWN_CA:..\..\third_party\boringssl\src\ssl\tls_record.cc:572:SSL alert number 48

I use Microsoft Edge to access the endpoint's Swagger. As part of the process I select the same client certificate that I am using with Bruno. The request via Swagger is successful.

This leads me to believe that Bruno is attempting to validate the client certificate and failing. Which is surprising because Edge is able to validate the certificate.

Help appreciated...

Configuration details below...

Windows 11
Brunuo 1.38.1 (screenshot)

Image

In my settings, I have Certificate Validation turned off (screenshot)...

Image

In the Windows Certificate Manager I have the client certificate, the signing certificate, and the CA certificate all showing as valid...

Image

.bru file to reproduce the bug

No response

Screenshots/Live demo link

Image

@wobbet wobbet added the bug Something isn't working label Jan 22, 2025
@wobbet
Copy link
Author

wobbet commented Jan 22, 2025

Related to 3364 ?

@wobbet
Copy link
Author

wobbet commented Jan 22, 2025

Update - my infrastructure team has informed me that our Apache server is locked down to TLS 1.2 in FIPS mode.

Is this something that Bruno supports?

@wobbet
Copy link
Author

wobbet commented Jan 28, 2025

Update - setting a custom CA file with the CA and intermediate certs let me get working. However, that is NOT the same as not requiring validation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants