{"action":"opened","issue":{"url":"https://api.github.com/repos/containous/traefik/issues/3875","repository_url":"https://api.github.com/repos/containous/traefik","labels_url":"https://api.github.com/repos/containous/traefik/issues/3875/labels{/name}","comments_url":"https://api.github.com/repos/containous/traefik/issues/3875/comments","events_url":"https://api.github.com/repos/containous/traefik/issues/3875/events","html_url":"https://github.com/containous/traefik/issues/3875","id":358903234,"node_id":"MDU6SXNzdWUzNTg5MDMyMzQ=","number":3875,"title":"[entryPoints.https.tls.ClientCA] Problem","user":{"login":"alpertandogan","id":24626375,"node_id":"MDQ6VXNlcjI0NjI2Mzc1","avatar_url":"https://avatars2.githubusercontent.com/u/24626375?v=4","gravatar_id":"","url":"https://api.github.com/users/alpertandogan","html_url":"https://github.com/alpertandogan","followers_url":"https://api.github.com/users/alpertandogan/followers","following_url":"https://api.github.com/users/alpertandogan/following{/other_user}","gists_url":"https://api.github.com/users/alpertandogan/gists{/gist_id}","starred_url":"https://api.github.com/users/alpertandogan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alpertandogan/subscriptions","organizations_url":"https://api.github.com/users/alpertandogan/orgs","repos_url":"https://api.github.com/users/alpertandogan/repos","events_url":"https://api.github.com/users/alpertandogan/events{/privacy}","received_events_url":"https://api.github.com/users/alpertandogan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-11T06:26:25Z","updated_at":"2018-09-11T06:26:25Z","closed_at":null,"author_association":"NONE","body":"<!--\r\nDO NOT FILE ISSUES FOR GENERAL SUPPORT QUESTIONS.\r\n\r\nThe issue tracker is for reporting bugs and feature requests only.\r\nFor end-user related support questions, please refer to one of the following:\r\n\r\n- Stack Overflow (using the \"traefik\" tag): https://stackoverflow.com/questions/tagged/traefik\r\n- the Traefik community Slack channel: https://slack.traefik.io\r\n\r\n-->\r\n\r\n\r\n### Do you want to request a *feature* or report a *bug*?\r\n\r\nBug\r\n\r\n### What did you do?\r\nUsinng configuration below . SSL site defined in entryPoints  works with Client using Browser.But dont work if client doesnot have CA boundle. \r\nhttps:/www.xxxx.com  On browser works well.\r\nBut using \r\ncurl -X GET -H '' 'https://www.xxxx.com' like that get an error.\r\n\r\n<!--\r\n\r\nHOW TO WRITE A GOOD BUG REPORT?\r\n\r\n- Respect the issue template as much as possible.\r\n- If possible, use the command `traefik bug`. See https://www.youtube.com/watch?v=Lyz62L8m93I.\r\n- The title should be short and descriptive.\r\n- Explain the conditions which led you to report this issue: the context.\r\n- The context should lead to something, an idea or a problem that you’re facing.\r\n- Remain clear and concise.\r\n- Format your messages to help the reader focus on what matters and understand the structure of your message, use Markdown syntax https://help.github.com/articles/github-flavored-markdown\r\n\r\n-->\r\n\r\n### What did you expect to see?\r\nStandalone web site using Apache2.4 with SSL defination work with CURL .. This site  comminicate with port 80 work behind Treafik configured SSL defination Using CURL must be work also.\r\n\r\n\r\n### What did you see instead?\r\nUsing CURL (or webhook from dialogflow.com .,aws.)  does not get CA boundle from treafik.\r\n\r\n\r\n### Output of `traefik version`: (_What version of Traefik are you using?_)\r\nFinal Latest version\r\n<!--\r\nFor the Traefik Docker image:\r\n    docker run [IMAGE] version\r\n    ex: docker run traefik version\r\n\r\nFor the alpine Traefik Docker image:\r\n    docker run [IMAGE] traefik version\r\n    ex: docker run traefik traefik version\r\n-->\r\n\r\n```\r\n\r\n(paste your output here)\r\n``\r\non CURL \r\ncurl -X GET -H '' 'https://www.xxxxx.com/wh/g.php'\r\ncurl: (60) Peer's Certificate issuer is not recognized.\r\nMore details here: http://curl.haxx.se/docs/sslcerts.html\r\ncurl performs SSL certificate verification by default, using a \"bundle\"\r\n of Certificate Authority (CA) public keys (CA certs)\r\n\r\nDEBU[2018-09-11T11:12:09+03:00] http: TLS handshake error from 31.xx.xx.122:57286: remote error: tls: unknown certificate authority\r\n\r\n\r\n\r\n### What is your environment & configuration (arguments, toml, provider, platform, ...)?\r\n\r\n```toml\r\n# (paste your configuration here)\r\n```\r\n\r\nlogLevel = \"DEBUG\"\r\n#logLevel = \"ERROR\"\r\n\r\n#[traefikLog]\r\n#  filePath = \"/tmp/logs/traefik.log\"\r\n#  format   = \"json\"\r\n\r\n#[accessLog]\r\n#  filePath = \"/tmp/logs/access.log\"\r\n#  format = \"json\"\r\n\r\n\r\n[web]\r\naddress = \":8080\"\r\n[healthcheck]\r\n\r\ndefaultEntryPoints = [\"http\", \"https\"]\r\n[entryPoints]\r\n  [entryPoints.http]\r\n   address = \"31.6.89.120:80\"\r\n   [entryPoints.http.redirect]\r\n    entryPoint = \"https\"  \r\n   [entryPoints.https]\r\n    address = \"31.xx.xx.120:443\"\r\n    compress = true\r\n   [entryPoints.https.tls]\r\n      minVersion = \"VersionTLS12\"\r\n      cipherSuites = [\r\n        \"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256\",\r\n        \"TLS_RSA_WITH_AES_256_GCM_SHA384\"\r\n       ]\r\n       \r\n    #[entryPoints.https.tls.ClientCA]\r\n    #  files = [\"COMODORSADomainValidationSecureServerCA.crt\"]\r\n      #, \"COMODORSAAddTrustCA.crt\", \"AddTrustExternalCARoot.crt\"\r\n    #  optional = false\r\n      \r\n   [[entryPoints.https.tls.certificates]]\r\n      certFile = \"xxxx_com.crt\"\r\n      keyFile = \"xxxx_com_nopass.key\"    \r\n   #[[entryPoints.http.tls.defaultCertificate]]\r\n   #   certFile = \"xxxx_com.crt\"\r\n   #   keyFile = \"xxxx_com_nopass.key\"    \r\n\r\n     \r\n\r\n        \r\n#consul.tls.ca=\"AddTrustExternalCARoot.crt\"\r\n#consul.tls.cert=\"xxxx_com.crt\"\r\n#consul.tls.key=\"xxxx_com_nopass.key\"\r\n# args = [\r\n#          \"--consul\",\r\n #         \"--consul.endpoint=127.0.0.1:8443\",\r\n#          \"--consul.prefix=traefik\",\r\n #         \"--consul.watch=true\",\r\n #         \"--consul.tls\",\r\n #         \"--consul.tls.ca=AddTrustExternalCARoot.crt\",\r\n#          \"--consul.tls.cert=xxxx_com.crt\",\r\n#          \"--consul.tls.key=xxxx_com_nopass.key\",\r\n#\r\n#          \"--consulCatalog.tls.ca=/tls/root-ca.cert\",\r\n#        ]\r\n\r\n[file]\r\n[backends]\r\n  [backends.xxxxserver]       \r\n    [backends.xxxxserver.buffering]\r\n      maxRequestBodyBytes = 10485760  \r\n      memRequestBodyBytes = 2097152  \r\n      maxResponseBodyBytes = 10485760\r\n      memResponseBodyBytes = 2097152 \r\n    [backends.xxxxserver.loadbalancer.stickiness]\r\n    [backends.xxxxserver.healthcheck]\r\n      path = \"/favicon.ico\"\r\n      interval = \"1000s\"\r\n    [backends.xxxxserver.circuitbreaker]\r\n      expression = \"NetworkErrorRatio() > 0.5\" \r\n    [backends.xxxxserver.servers.server1]\r\n      url = \"http://31.xx.xx.121\"\r\n        weight = 10\r\n#    [backends.xxxxserver.servers.server2]\r\n#      url = \"http://31.xx.xx.122\"\r\n#        weight = 10\r\n\r\n  [frontends]\r\n  [frontends.xxxxserver_app]\r\n  entrypoints = [\"http\",\"https\"]\r\n  backend = \"xxxxserver\"\r\n  passHostHeader = true\r\n    [frontends.xxxxserver_app.routes.all]\r\n     rule = \"HostRegexp:www.xxxx.com\"\r\n\r\n<!--\r\nAdd more configuration information here.\r\n-->\r\n\r\n\r\n### If applicable, please paste the log output in DEBUG level (`--logLevel=DEBUG` switch)\r\n\r\n```\r\n(paste your output here)\r\n```\r\nDEBU[2018-09-11T11:12:09+03:00] http: TLS handshake error from 31.xxx.xxx122:57286: remote error: tls: unknown certificate authority\r\n\r\n"}}
{"actor":{"display_login":"alpertandogan"}}