# How to solve SSL certificate issue?

**URL:** <https://discourse.chef.io/t/how-to-solve-ssl-certificate-issue/9341>\
**Category:** Chef Infra (archive)\
**Created:** [September 7, 2016, 11:19am UTC](https://discourse.chef.io/t/how-to-solve-ssl-certificate-issue/9341 "2016-09-07T11:19:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![abhaya](https://avatars.discourse-cdn.com/v4/letter/a/3d9bf3/32.png) [@abhaya](https://discourse.chef.io/u/abhaya)\
**Post date:** [September 7, 2016, 11:19am UTC](https://discourse.chef.io/t/how-to-solve-ssl-certificate-issue/9341/1 "2016-09-07T11:19:07Z")

</div>

I have following configurations performed on my machines

For workstation  
Installed chefdk 0.17, created a cookbook  
For chef server  
Installed chefserver v12.8,Configured it,created user as well as org  
While I tried to run my runlist from my workstation on node following is the error,

![](https://sea2.discourse-cdn.com/flex016/images/transparent.png)

Here, I have fetched the ssl certificate and also checked,

```
    PS C:\Users\e-abhayag\chef-starter\chef-repo> knife ssl check
    Connecting to host EVALCHEFLIN01:443
    Successfully verified certificates from `EVALCHEFLIN01'

```

What could the problem be?

Whereas if I edit the client.rb with `ssl_verify_mode :verify_none` , it's working fine.

---

<div class="post-metadata">

**Author:** ![yvangelist](https://avatars.discourse-cdn.com/v4/letter/y/8baadc/32.png) [@yvangelist](https://discourse.chef.io/u/yvangelist)\
**Post date:** [September 8, 2016, 11:19am UTC](https://discourse.chef.io/t/how-to-solve-ssl-certificate-issue/9341/2 "2016-09-08T11:19:53Z")

</div>

Ho abhaya,

Just a quick test. Have you tried to reach your chef server in ssl via the browser ?  
Is the certificate showing okay when browsing ?

FYI: In windows I had to export it as a .crt and put it in the trusted\_certs folder.

Hope this helps

---

<div class="post-metadata">

**Author:** ![Tensibai](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/tensibai/32/29_2.png) [@Tensibai](https://discourse.chef.io/u/Tensibai)\
**Post date:** [September 9, 2016, 12:58pm UTC](https://discourse.chef.io/t/how-to-solve-ssl-certificate-issue/9341/3 "2016-09-09T12:58:25Z")

</div>

The self signe certificate for the chef server is really a pain usually.

The problem is that `knife ssl check` check against your workstation configuration, not the node config.

I can’t guess how you installed chef ont he machine with IP 10.11.60.42 but I assume it didn’t get the chef server certificate in it’s trusted\_cert directory. And even if it’s there, some libs don’t take the trusted\_cert dir in account. You’ll have to add the certificate into the cacert.pem of the node’s chef install (and maybe set a SSL\_CERT\_FILE export if you use some gems with others libraries.

A more detailed “how to” I did on stack overflow is [here](http://stackoverflow.com/questions/27833419/i-have-installed-chef-dk-and-started-using-berkshelf-but-berks-upload-failed/27838544#27838544), adapt the path.

Openssl is bundled in the chef install, so adapting the path should do (replace `/opt/opscode/chef` by your chef installation path)