{"action":"created","issue":{"url":"https://api.github.com/repos/rundeck/rundeck/issues/1469","labels_url":"https://api.github.com/repos/rundeck/rundeck/issues/1469/labels{/name}","comments_url":"https://api.github.com/repos/rundeck/rundeck/issues/1469/comments","events_url":"https://api.github.com/repos/rundeck/rundeck/issues/1469/events","html_url":"https://github.com/rundeck/rundeck/issues/1469","id":110757956,"number":1469,"title":"SCM HTTPS, unknown CA","user":{"login":"LordMike","id":1027111,"avatar_url":"https://avatars.githubusercontent.com/u/1027111?v=3","gravatar_id":"","url":"https://api.github.com/users/LordMike","html_url":"https://github.com/LordMike","followers_url":"https://api.github.com/users/LordMike/followers","following_url":"https://api.github.com/users/LordMike/following{/other_user}","gists_url":"https://api.github.com/users/LordMike/gists{/gist_id}","starred_url":"https://api.github.com/users/LordMike/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/LordMike/subscriptions","organizations_url":"https://api.github.com/users/LordMike/orgs","repos_url":"https://api.github.com/users/LordMike/repos","events_url":"https://api.github.com/users/LordMike/events{/privacy}","received_events_url":"https://api.github.com/users/LordMike/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rundeck/rundeck/labels/bug","name":"bug","color":"e10c02"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/rundeck/rundeck/milestones/39","html_url":"https://github.com/rundeck/rundeck/milestones/2.6.1","labels_url":"https://api.github.com/repos/rundeck/rundeck/milestones/39/labels","id":1351543,"number":39,"title":"2.6.1","description":"","creator":{"login":"gschueler","id":55603,"avatar_url":"https://avatars.githubusercontent.com/u/55603?v=3","gravatar_id":"","url":"https://api.github.com/users/gschueler","html_url":"https://github.com/gschueler","followers_url":"https://api.github.com/users/gschueler/followers","following_url":"https://api.github.com/users/gschueler/following{/other_user}","gists_url":"https://api.github.com/users/gschueler/gists{/gist_id}","starred_url":"https://api.github.com/users/gschueler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gschueler/subscriptions","organizations_url":"https://api.github.com/users/gschueler/orgs","repos_url":"https://api.github.com/users/gschueler/repos","events_url":"https://api.github.com/users/gschueler/events{/privacy}","received_events_url":"https://api.github.com/users/gschueler/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":3,"state":"open","created_at":"2015-10-12T18:26:30Z","updated_at":"2015-10-15T21:21:48Z","due_on":null,"closed_at":null},"comments":8,"created_at":"2015-10-10T00:58:01Z","updated_at":"2015-10-15T21:33:40Z","closed_at":"2015-10-14T18:34:15Z","body":"Hi,\r\n\r\nWhen trying to set up Git-SCM from #1465, I get the following error with HTTPS (was unable to do SSH for some reason):\r\n\r\n![image](https://cloud.githubusercontent.com/assets/1027111/10408319/90374282-6efa-11e5-9ef8-27e9973565f3.png)\r\n\r\nSo, basically my site uses a CACert.org certificate, which is probably what it's complaining about. This will however affect any site/organization using an internal CA or other untrusted CA.\r\n\r\nHow can I add the CA certificate to my trust chain?\r\nIs it git's trust chain or Java's trust chain? (tool is git, exception is Java)"},"comment":{"url":"https://api.github.com/repos/rundeck/rundeck/issues/comments/148527136","html_url":"https://github.com/rundeck/rundeck/issues/1469#issuecomment-148527136","issue_url":"https://api.github.com/repos/rundeck/rundeck/issues/1469","id":148527136,"user":{"login":"gschueler","id":55603,"avatar_url":"https://avatars.githubusercontent.com/u/55603?v=3","gravatar_id":"","url":"https://api.github.com/users/gschueler","html_url":"https://github.com/gschueler","followers_url":"https://api.github.com/users/gschueler/followers","following_url":"https://api.github.com/users/gschueler/following{/other_user}","gists_url":"https://api.github.com/users/gschueler/gists{/gist_id}","starred_url":"https://api.github.com/users/gschueler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gschueler/subscriptions","organizations_url":"https://api.github.com/users/gschueler/orgs","repos_url":"https://api.github.com/users/gschueler/repos","events_url":"https://api.github.com/users/gschueler/events{/privacy}","received_events_url":"https://api.github.com/users/gschueler/received_events","type":"User","site_admin":false},"created_at":"2015-10-15T21:33:40Z","updated_at":"2015-10-15T21:33:40Z","body":"thanks.\r\n\r\nmaking the config properties fancier (dynamic) may be slightly out of scope right now, definitely a future enhancement.\r\n\r\nI think adding a textbox is a good idea.  the git plugin could run `ssh-keyscan` internally, but would then need a two-step confirmation to present the key sig to the user to verify, so perhaps that is the next phase of enhancement.\r\n\r\nGood point about storing the host keys for secondary environment... one caveat: right now the SCM plugin config is scoped only to the unique UUID of current rundeck server node (if using clusterMode), so that multiple nodes don't all attempt to synch/import/export jobs to the same repo.  There needs to be a way to migrate the config from one server UUID to another for failover.\r\n\r\nI appreciate all of the feedback!"}}