Mender client rejects the server certificate of mTLS ambassador with Error: "certificate signed by unknown authority, openssl verify rc: 20"

General Discussions
,
5

I have confirmed with Mender support that this approach is valid.
It is either:

  1. Specify the self-signed certificate of the CA in mender.conf in the device to verify the server/mTLS proxy or,
  2. Add the server certificate to the list of trusted certificates on the system:
scp -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -P 8822 ca.crt root@$CONTAINER_IP:/usr/local/share/ca-certificates/mender/ca.crt
ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -p 8822 root@$CONTAINER_IP update-ca-certificates
1 Like