starred/mkcert

Fork 0

mirror of https://github.com/FiloSottile/mkcert.git synced 2026-04-25 13:36:02 +03:00

[GH-ISSUE #341] Using CLI tools to request service with mkcert certs does not work (macOS) #222

New issue

Closed

opened 2026-02-25 22:32:53 +03:00 by kerem · 5 comments

kerem commented

2026-02-25 22:32:53 +03:00

Owner

Originally created by @back-2-95 on GitHub (Feb 13, 2021).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/341

E.g. if I make requests to my local container (Traefik + mkcert generated certs) with Httpie. Note that these certs work when accessing the site with Chrome or Firefox. I use macOS Big Sur atm.

$ http --headers https://portainer.docker.sh

Will end up with following error:

http: error: SSLError: HTTPSConnectionPool(host='portainer.docker.sh', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)'))) while doing a GET request to URL: https://portainer.docker.sh/

Original issue from our tool:
https://github.com/druidfi/stonehenge/issues/47

Is there some extra step I'm missing?
Or is this a known issue?

Originally created by @back-2-95 on GitHub (Feb 13, 2021). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/341 E.g. if I make requests to my local container (Traefik + mkcert generated certs) with Httpie. Note that these certs work when accessing the site with Chrome or Firefox. I use macOS Big Sur atm. ``` $ http --headers https://portainer.docker.sh ``` Will end up with following error: ``` http: error: SSLError: HTTPSConnectionPool(host='portainer.docker.sh', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)'))) while doing a GET request to URL: https://portainer.docker.sh/ ``` Original issue from our tool: https://github.com/druidfi/stonehenge/issues/47 - Is there some extra step I'm missing? - Or is this a known issue?

kerem closed this issue

2026-02-25 22:32:53 +03:00

kerem commented

2026-02-25 22:32:54 +03:00

Author

Owner

@fgm commented on GitHub (Mar 3, 2021):

Same problem with httpie on bare metal Big Sur, although curl works normally:

$ http -phb https://localhost:8443

http: error: SSLError: HTTPSConnectionPool(host='localhost', port=8443): Max retries exceeded with url: / (Caused by 
SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)'))) while doing a GET request to URL: https://localhost:8443/
$

But:

$ curl -I  https://localhost:8443
HTTP/2 200
content-type: text/plain; charset=utf-8
content-length: 34
date: Wed, 03 Mar 2021 08:42:33 GMT
$

@fgm commented on GitHub (Mar 3, 2021): Same problem with httpie on bare metal Big Sur, although curl works normally: $ http -phb https://localhost:8443 http: error: SSLError: HTTPSConnectionPool(host='localhost', port=8443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)'))) while doing a GET request to URL: https://localhost:8443/ $ But: $ curl -I https://localhost:8443 HTTP/2 200 content-type: text/plain; charset=utf-8 content-length: 34 date: Wed, 03 Mar 2021 08:42:33 GMT $

kerem commented

2026-02-25 22:32:54 +03:00

Author

Owner

@back-2-95 commented on GitHub (Mar 7, 2021):

Related discussion on httpie https://github.com/httpie/httpie/issues/768

@back-2-95 commented on GitHub (Mar 7, 2021): Related discussion on httpie https://github.com/httpie/httpie/issues/768

kerem commented

2026-02-25 22:32:54 +03:00

Author

Owner

@back-2-95 commented on GitHub (Mar 7, 2021):

And https://github.com/httpie/httpie/issues/480#issuecomment-673568555

@back-2-95 commented on GitHub (Mar 7, 2021): And https://github.com/httpie/httpie/issues/480#issuecomment-673568555

kerem commented

2026-02-25 22:32:54 +03:00

Author

Owner

@back-2-95 commented on GitHub (Mar 7, 2021):

So I would conclude that it's problem with a certain cli tool and not mkcert.

@back-2-95 commented on GitHub (Mar 7, 2021): So I would conclude that it's problem with a certain cli tool and not mkcert.

kerem commented

2026-02-25 22:32:54 +03:00

Author

Owner

@g0t4 commented on GitHub (Nov 13, 2023):

FYI this works for *nix:

export REQUESTS_CA_BUNDLE="$(mkcert -CAROOT)/rootCA.pem"
https localhost

@g0t4 commented on GitHub (Nov 13, 2023): FYI this works for *nix: ```bash export REQUESTS_CA_BUNDLE="$(mkcert -CAROOT)/rootCA.pem" https localhost ```