{"action":"created","issue":{"url":"https://api.github.com/repos/chef/chef/issues/2538","repository_url":"https://api.github.com/repos/chef/chef","labels_url":"https://api.github.com/repos/chef/chef/issues/2538/labels{/name}","comments_url":"https://api.github.com/repos/chef/chef/issues/2538/comments","events_url":"https://api.github.com/repos/chef/chef/issues/2538/events","html_url":"https://github.com/chef/chef/issues/2538","id":51040525,"number":2538,"title":"When *both* verify_api_cert and ssl_verify_mode options are set in knife.rb, it doesn't respect either","user":{"login":"yvovandoorn","id":2694655,"avatar_url":"https://avatars.githubusercontent.com/u/2694655?v=3","gravatar_id":"","url":"https://api.github.com/users/yvovandoorn","html_url":"https://github.com/yvovandoorn","followers_url":"https://api.github.com/users/yvovandoorn/followers","following_url":"https://api.github.com/users/yvovandoorn/following{/other_user}","gists_url":"https://api.github.com/users/yvovandoorn/gists{/gist_id}","starred_url":"https://api.github.com/users/yvovandoorn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yvovandoorn/subscriptions","organizations_url":"https://api.github.com/users/yvovandoorn/orgs","repos_url":"https://api.github.com/users/yvovandoorn/repos","events_url":"https://api.github.com/users/yvovandoorn/events{/privacy}","received_events_url":"https://api.github.com/users/yvovandoorn/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2014-12-04T22:52:00Z","updated_at":"2016-04-29T23:48:01Z","closed_at":"2015-01-07T14:15:50Z","body":"Scenario:\r\nUsing knife under chef-client 12 against a Chef server with a self signed SSL certificate requires out of box modifications to the knife.rb file to not throw an error.\r\n\r\nWhen both options:\r\n```ruby\r\nverify_api_cert\t\t \"false\"\r\nssl_verify_mode \t :verify_none\r\n```\r\n\r\nAre present in the knife.rb file, you will get errors like this:\r\n```ruby\r\nERROR: SSL Validation failure connecting to host: manage-demo.opscode.us - SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed\r\nERROR: OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed\r\n```\r\n\r\nWhen I remove 'verify_api_cert', there is no longer an error.\r\n"},"comment":{"url":"https://api.github.com/repos/chef/chef/issues/comments/215909241","html_url":"https://github.com/chef/chef/issues/2538#issuecomment-215909241","issue_url":"https://api.github.com/repos/chef/chef/issues/2538","id":215909241,"user":{"login":"sam3k","id":180152,"avatar_url":"https://avatars.githubusercontent.com/u/180152?v=3","gravatar_id":"","url":"https://api.github.com/users/sam3k","html_url":"https://github.com/sam3k","followers_url":"https://api.github.com/users/sam3k/followers","following_url":"https://api.github.com/users/sam3k/following{/other_user}","gists_url":"https://api.github.com/users/sam3k/gists{/gist_id}","starred_url":"https://api.github.com/users/sam3k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sam3k/subscriptions","organizations_url":"https://api.github.com/users/sam3k/orgs","repos_url":"https://api.github.com/users/sam3k/repos","events_url":"https://api.github.com/users/sam3k/events{/privacy}","received_events_url":"https://api.github.com/users/sam3k/received_events","type":"User","site_admin":false},"created_at":"2016-04-29T23:48:01Z","updated_at":"2016-04-29T23:48:01Z","body":"@lamont-granquist is there a work around? I tried all the suggestions above and nothing helped: (removed verify_api_cert false, changed to verify_api_cert \"false\", etc)\r\n\r\n```bash\r\nRunning handlers:\r\n[2016-04-29T19:38:15-04:00] ERROR: Running exception handlers\r\nRunning handlers complete\r\n[2016-04-29T19:38:15-04:00] ERROR: Exception handlers complete\r\nChef Client failed. 19 resources updated in 290.021195548 seconds\r\n[2016-04-29T19:38:16-04:00] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out\r\n[2016-04-29T19:38:16-04:00] ERROR: remote_file[/usr/local/src/phantomjs-1.9.2-linux-x86_64.tar.bz2] (phantomjs::source line 36) had an error: OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed\r\n[2016-04-29T19:38:16-04:00] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)\r\n```\r\n\r\nMy .chef/knive.rb looks like this:\r\n\r\n```bash\r\ncookbook_path [ '~/my-app/chef/cookbooks' ]\r\n\r\nssl_verify_mode :verify_none\r\nverify_api_cert false\r\n```"}}