{"action":"created","issue":{"url":"https://api.github.com/repos/opscode-cookbooks/chef-client/issues/187","labels_url":"https://api.github.com/repos/opscode-cookbooks/chef-client/issues/187/labels{/name}","comments_url":"https://api.github.com/repos/opscode-cookbooks/chef-client/issues/187/comments","events_url":"https://api.github.com/repos/opscode-cookbooks/chef-client/issues/187/events","html_url":"https://github.com/opscode-cookbooks/chef-client/pull/187","id":41712584,"number":187,"title":"Handle verify_api_cert parameter by copying trusted certificate file to ...","user":{"login":"snkutlu","id":1405454,"avatar_url":"https://avatars.githubusercontent.com/u/1405454?v=3","gravatar_id":"","url":"https://api.github.com/users/snkutlu","html_url":"https://github.com/snkutlu","followers_url":"https://api.github.com/users/snkutlu/followers","following_url":"https://api.github.com/users/snkutlu/following{/other_user}","gists_url":"https://api.github.com/users/snkutlu/gists{/gist_id}","starred_url":"https://api.github.com/users/snkutlu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snkutlu/subscriptions","organizations_url":"https://api.github.com/users/snkutlu/orgs","repos_url":"https://api.github.com/users/snkutlu/repos","events_url":"https://api.github.com/users/snkutlu/events{/privacy}","received_events_url":"https://api.github.com/users/snkutlu/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":18,"created_at":"2014-09-02T14:06:13Z","updated_at":"2015-05-26T18:21:47Z","closed_at":"2015-04-12T02:59:15Z","pull_request":{"url":"https://api.github.com/repos/opscode-cookbooks/chef-client/pulls/187","html_url":"https://github.com/opscode-cookbooks/chef-client/pull/187","diff_url":"https://github.com/opscode-cookbooks/chef-client/pull/187.diff","patch_url":"https://github.com/opscode-cookbooks/chef-client/pull/187.patch"},"body":"Handle verify_api_cert parameter by copying trusted certificate file to client before client.rb is updated\r\n\r\nTrusted certificates and verify_api_cert is handled with knife bootstrap command during initial bootstrap but for existing clients, this change will copy trusted certificate of Chef server from URI in node['chef_client']['trusted_cert'] to /etc/chef/trusted_certs directory if \r\n- verify_api_cert attribute is set to true and \r\n- node['chef_client']['trusted_cert'] attribute is not empty\r\n\r\nIf verify_api_cert is true and 'trusted_cert' attribute is not set, then in order not to break SSL communication, code will set verify_api_cert to false for that chef-client session. \r\n"},"comment":{"url":"https://api.github.com/repos/opscode-cookbooks/chef-client/issues/comments/105624236","html_url":"https://github.com/opscode-cookbooks/chef-client/pull/187#issuecomment-105624236","issue_url":"https://api.github.com/repos/opscode-cookbooks/chef-client/issues/187","id":105624236,"user":{"login":"danielsdeleo","id":37162,"avatar_url":"https://avatars.githubusercontent.com/u/37162?v=3","gravatar_id":"","url":"https://api.github.com/users/danielsdeleo","html_url":"https://github.com/danielsdeleo","followers_url":"https://api.github.com/users/danielsdeleo/followers","following_url":"https://api.github.com/users/danielsdeleo/following{/other_user}","gists_url":"https://api.github.com/users/danielsdeleo/gists{/gist_id}","starred_url":"https://api.github.com/users/danielsdeleo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/danielsdeleo/subscriptions","organizations_url":"https://api.github.com/users/danielsdeleo/orgs","repos_url":"https://api.github.com/users/danielsdeleo/repos","events_url":"https://api.github.com/users/danielsdeleo/events{/privacy}","received_events_url":"https://api.github.com/users/danielsdeleo/received_events","type":"User","site_admin":false},"created_at":"2015-05-26T18:21:47Z","updated_at":"2015-05-26T18:21:47Z","body":"For your use case, this might be true. If you manually add the required certs to /etc/chef/trusted_certs, then the expected behavior is that HTTPS requests made by chef (`http_request`, `remote_file`, requests to a Chef Server) should work. Is that the case?"}}