# Trouble installing with ssl certificate signed by internal CA **URL:** \ **Category:** AWX Project\ **Tags:** awx\ **Created:** [September 19, 2019, 3:11am UTC](https://forum.ansible.com/t/trouble-installing-with-ssl-certificate-signed-by-internal-ca/31311 "2019-09-19T03:11:52Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![refried\_jello](https://avatars.discourse-cdn.com/v4/letter/r/f14d63/32.png) [@refried\_jello](https://forum.ansible.com/u/refried_jello)\ **Post date:** [September 19, 2019, 3:11am UTC](https://forum.ansible.com/t/trouble-installing-with-ssl-certificate-signed-by-internal-ca/31311/1 "2019-09-19T03:11:52Z")
CentOS 7.6.1810 - AWX can build fine without ssl support, and the UI is working. However trying to build the image by specifying a chained PEM cert/key combo using my internal CA is not working. The main error is: ChromeDriver installation failed Error with http(s) request: Error: self signed certificate in certificate chain The full error is: TASK [image\_build : Build AWX distribution using container] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* fatal: [localhost → localhost]: FAILED! =\> {“changed”: false, “msg”: “PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /awx/awx/ui/node\_modules/fsevents\n\> node install\n\n\n\> uglifyjs-webpack-plugin@0.4.6 postinstall /awx/awx/ui/node\_modules/uglifyjs-webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/node\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD" environment variable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> node postinstall-build.js src\n\n\n\> chromedriver@2.40.0 install /awx/awx/ui/node\_modules/chromedriver\n\> node install.js\n\nDownloading [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) to /tmp/chromedriver/chromedriver\_linux64.zip\nChromeDriver installation failed Error with http(s) request: Error: self signed certificate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chromedriver@2.40.0 install: `node install.js`\nnpm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Failed at the chromedriver@2.40.0 install script.\nnpm ERR! This is probably not a problem with npm. There is likely additional logging output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /root/.npm/\_logs/2019-09-19T01\_29\_42\_681Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\nPUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /awx/awx/ui/node\_modules/fsevents\n\> node install\n\n\n\> uglifyjs-webpack-plugin@0.4.6 postinstall /awx/awx/ui/node\_modules/uglifyjs-webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/node\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD" environment variable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> node postinstall-build.js src\n\n\n\> chromedriver@2.40.0 install /awx/awx/ui/node\_modules/chromedriver\n\> node install.js\n\nDownloading [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) to /tmp/chromedriver/chromedriver\_linux64.zip\nChromeDriver installation failed Error with http(s) request: Error: self signed certificate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chromedriver@2.40.0 install: `node install.js`\nnpm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Failed at the chromedriver@2.40.0 install script.\nnpm ERR! This is probably not a problem with npm. There is likely additional logging output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /root/.npm/\_logs/2019-09-19T02\_41\_26\_233Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\nPUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /awx/awx/ui/node\_modules/fsevents\n\> node install\n\n\n\> uglifyjs-webpack-plugin@0.4.6 postinstall /awx/awx/ui/node\_modules/uglifyjs-webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/node\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD" environment variable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> node postinstall-build.js src\n\n\n\> chromedriver@2.40.0 install /awx/awx/ui/node\_modules/chromedriver\n\> node install.js\n\nDownloading [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) to /tmp/chromedriver/chromedriver\_linux64.zip\nChromeDriver installation failed Error with http(s) request: Error: self signed certificate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chromedriver@2.40.0 install: `node install.js`\nnpm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Failed at the chromedriver@2.40.0 install script.\nnpm ERR! This is probably not a problem with npm. There is likely additional logging output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /root/.npm/\_logs/2019-09-19T03\_05\_51\_039Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\n”, “status”: 2} This is how I combined my certs and key together: $ cat server.crt ca.crt server.key \> server-ca.pem Running openssl it seems to be fine: $ openssl verify -CAfile ca.crt server-ca.pem server-ca.pem: OK In my inventory file I have made these adjustments: #dockerhub\_base=ansible ssl\_certificate=/etc/ssl/certs/server-ca.pem Do I need to add my internal CA servers certificate to the trust store or something? Thanks, ---
**Author:** ![refried\_jello](https://avatars.discourse-cdn.com/v4/letter/r/f14d63/32.png) [@refried\_jello](https://forum.ansible.com/u/refried_jello)\ **Post date:** [September 19, 2019, 4:18am UTC](https://forum.ansible.com/t/trouble-installing-with-ssl-certificate-signed-by-internal-ca/31311/2 "2019-09-19T04:18:44Z")
Realized the ‘ca\_trust\_dir’ option is there, and tried that but it’s still failing. I am using a concatenated cert + key file for my server. $ cat server.crt server.key \> server.pem I copied my CA cert file to this directory: /etc/pki/ca-trust/source/anchors And ran this command: update-ca-trust Running openssl verify still shows certificate is good. Still getting same basic error: Error: self signed certificate in certificate chain Here is more of the error log with increased verbosity: “msg”: “PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /awx/awx/ui/node\_modules/fsevents\n\> node install\n\n\n\> uglifyjs-webpack-plugin@0.4.6 pos tinstall /awx/awx/ui/node\_modules/uglifyjs-webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/node\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPET EER\_SKIP\_CHROMIUM\_DOWNLOAD" environment variable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> node postinstall-build.js src\n\n\n\> chromedriver@2.40.0 install /awx/awx/ui/node\_modules /chromedriver\n\> node install.js\n\nDownloading [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) to /tmp/chromedriver/chromedriver\_linux64.zip\nChromeDriver installation failed Error wit h http(s) request: Error: self signed certificate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chromedriver@2.40.0 install: `node install.js`\nnpm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Fa iled at the chromedriver@2.40.0 install script.\nnpm ERR! This is probably not a problem with npm. There is likely additional logging output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! / root/.npm/\_logs/2019-09-19T01\_29\_42\_681Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\nPUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /a wx/awx/ui/node\_modules/fsevents\n\> node install\n\n\n\> uglifyjs-webpack-plugin@0.4.6 postinstall /awx/awx/ui/node\_modules/uglifyjs-webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/no de\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD" environment variable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> n ode postinstall-build.js src\n\n\n\> chromedriver@2.40.0 install /awx/awx/ui/node\_modules/chromedriver\n\> node install.js\n\nDownloading [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) t o /tmp/chromedriver/chromedriver\_linux64.zip\nChromeDriver installation failed Error with http(s) request: Error: self signed certificate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chrome driver@2.40.0 install: `node install.js`\nnpm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Failed at the chromedriver@2.40.0 install script.\nnpm ERR! This is probably not a problem with npm. There is likely additional loggi ng output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /root/.npm/\_logs/2019-09-19T02\_41\_26\_233Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\nPUPPETEER\_SKIP\_CHROMIUM\_DOWNLOA D=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /awx/awx/ui/node\_modules/fsevents\n\> node install\n\n\n\> uglifyjs-webpack-plugin@0.4.6 postinstall /awx/awx/ui/node\_modules/uglifyjs- webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/node\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD" environment va riable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> node postinstall-build.js src\n\n\n\> chromedriver@2.40.0 install /awx/awx/ui/node\_modules/chromedriver\n\> node install.js\n\nDownloa ding [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) to /tmp/chromedriver/chromedriver\_linux64.zip\nChromeDriver installation failed Error with http(s) request: Error: self signed certi ficate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chromedriver@2.40.0 install: `node install.js`\nnpm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Failed at the chromedriver@2.40.0 install scr ipt.\nnpm ERR! This is probably not a problem with npm. There is likely additional logging output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /root/.npm/\_logs/2019-09-19T03\_05\_51\_039Z-de bug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\nPUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /awx/awx/ui/node\_modules/fsevents\n\> node ins tall\n\n\n\> uglifyjs-webpack-plugin@0.4.6 postinstall /awx/awx/ui/node\_modules/uglifyjs-webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/node\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD" environment variable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> node postinstall-build.js src\n\n\n\> chromed river@2.40.0 install /awx/awx/ui/node\_modules/chromedriver\n\> node install.js\n\nDownloading [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) to /tmp/chromedriver/chromedriver\_linux64.zi p\nChromeDriver installation failed Error with http(s) request: Error: self signed certificate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chromedriver@2.40.0 install: `node install.js`\nn pm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Failed at the chromedriver@2.40.0 install script.\nnpm ERR! This is probably not a problem with npm. There is likely additional logging output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /root/.npm/\_logs/2019-09-19T03\_34\_13\_485Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\nPUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci – no-save awx/ui\nnpm ERR! Error while executing:\nnpm ERR! /usr/bin/git ls-remote -h -t ssh://git@github.com/ansible/timezone-js.git\nnpm ERR! \nnpm ERR! fatal: Unable to read current working directory: No such file or d irectory\nnpm ERR! \nnpm ERR! exited with error code: 128\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /root/.npm/\_logs/2019-09-19T03\_49\_32\_829Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\nPUPPETEER\_SKIP\_CHROMIUM\_DOWNLOAD=1 npm --unsafe-perm --prefix awx/ui ci --no-save awx/ui\n\n\> fsevents@1.2.4 install /awx/awx/ui/node\_modules/fsevents\n\> node install\n\n\n\> uglifyjs-webpack-plugin@0.4.6 posti nstall /awx/awx/ui/node\_modules/uglifyjs-webpack-plugin\n\> node lib/post\_install.js\n\n\n\> puppeteer@1.8.0 install /awx/awx/ui/node\_modules/puppeteer\n\> node install.js\n\n **INFO** Skipping Chromium download. "PUPPETEE R\_SKIP\_CHROMIUM\_DOWNLOAD" environment variable was found.\n\n\> nunjucks@3.1.3 postinstall /awx/awx/ui/node\_modules/nunjucks\n\> node postinstall-build.js src\n\n\n\> chromedriver@2.40.0 install /awx/awx/ui/node\_modules/c hromedriver\n\> node install.js\n\nDownloading [https://chromedriver.storage.googleapis.com/2.40/chromedriver\_linux64.zip\nSaving](https://chromedriver.storage.googleapis.com/2.40/chromedriver_linux64.zip%5CnSaving) to /tmp/chromedriver/chromedriver\_linux64.zip\nChromeDriver installation failed Error with http(s) request: Error: self signed certificate in certificate chain\nnpm ERR! code ELIFECYCLE\nnpm ERR! errno 1\nnpm ERR! chromedriver@2.40.0 install: `node install.js`\nnpm ERR! Exit status 1\nnpm ERR! \nnpm ERR! Fail ed at the chromedriver@2.40.0 install script.\nnpm ERR! This is probably not a problem with npm. There is likely additional logging output above.\n\nnpm ERR! A complete log of this run can be found in:\nnpm ERR! /ro ot/.npm/\_logs/2019-09-19T04\_07\_34\_078Z-debug.log\nmake: \*\*\* [awx/ui/.release\_deps\_built] Error 1\n”, “status”: 2 } Can someone help me understand why its still failing? Are there other openssl commands I can run, or other log files I can check? Thank you! ---
**Author:** ![refried\_jello](https://avatars.discourse-cdn.com/v4/letter/r/f14d63/32.png) [@refried\_jello](https://forum.ansible.com/u/refried_jello)\ **Post date:** [September 19, 2019, 5:40pm UTC](https://forum.ansible.com/t/trouble-installing-with-ssl-certificate-signed-by-internal-ca/31311/3 "2019-09-19T17:40:39Z")
I opened a bug report for this: [https://github.com/ansible/awx/issues/4786](https://github.com/ansible/awx/issues/4786)