# Knife winrm issue

**URL:** <https://discourse.chef.io/t/knife-winrm-issue/7724>\
**Category:** Chef Infra (archive)\
**Created:** [February 2, 2016, 4:56pm UTC](https://discourse.chef.io/t/knife-winrm-issue/7724 "2016-02-02T16:56:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sasisai](https://avatars.discourse-cdn.com/v4/letter/s/edb3f5/32.png) [@sasisai](https://discourse.chef.io/u/sasisai)\
**Post date:** [February 2, 2016, 4:56pm UTC](https://discourse.chef.io/t/knife-winrm-issue/7724/1 "2016-02-02T16:56:50Z")

</div>

Hi,

Winrm http calls are blocked in my organization. when i am trying to run below command i am getting error mentioned below

Command : knife winrm -m MACHINE\_HOSTNAME ‘dir c:’ -x domain\user -P secret -p 5986 -t ssl

**ERROR :** Original Exception: OpenSSL::SSL::SSLError: SSL\_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

---

<div class="post-metadata">

**Author:** ![Matt\_Wrock](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/matt_wrock/32/3394_2.png) [@Matt\_Wrock](https://discourse.chef.io/u/Matt_Wrock)\
**Post date:** [February 2, 2016, 7:01pm UTC](https://discourse.chef.io/t/knife-winrm-issue/7724/2 "2016-02-02T19:01:09Z")

</div>

This doesn’t look like a “blocking” scenario but rather a basic certificate validation problem. The later would either be due to the fact that the certificate is self signed and truly not valid or an issue with your ruby trusted certs. Problems with ruby and SSL certs are common on a windows workstation but the chefdk does stuff to fix that. If you are using a self-signed cert and just want to ignore validation, add `--winrm-ssl-verify-mode verify_none` to your command.