{"action":"created","issue":{"url":"https://api.github.com/repos/DataDog/dd-agent/issues/1964","labels_url":"https://api.github.com/repos/DataDog/dd-agent/issues/1964/labels{/name}","comments_url":"https://api.github.com/repos/DataDog/dd-agent/issues/1964/comments","events_url":"https://api.github.com/repos/DataDog/dd-agent/issues/1964/events","html_url":"https://github.com/DataDog/dd-agent/issues/1964","id":109578979,"number":1964,"title":"SSL Connection Failure ","user":{"login":"gphat","id":45159,"avatar_url":"https://avatars.githubusercontent.com/u/45159?v=3","gravatar_id":"","url":"https://api.github.com/users/gphat","html_url":"https://github.com/gphat","followers_url":"https://api.github.com/users/gphat/followers","following_url":"https://api.github.com/users/gphat/following{/other_user}","gists_url":"https://api.github.com/users/gphat/gists{/gist_id}","starred_url":"https://api.github.com/users/gphat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gphat/subscriptions","organizations_url":"https://api.github.com/users/gphat/orgs","repos_url":"https://api.github.com/users/gphat/repos","events_url":"https://api.github.com/users/gphat/events{/privacy}","received_events_url":"https://api.github.com/users/gphat/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-10-02T21:55:50Z","updated_at":"2015-10-21T15:26:40Z","closed_at":null,"body":"When trying to use SSL validation (a requirement for us) to an **internal HAProxy** as per [the documentation](https://github.com/DataDog/dd-agent/wiki/Proxy-Configuration#using-haproxy-as-a-proxy) I'm having trouble with the embedded SSL/cURL.\r\n\r\nFrom `/opt/datadog-agent/embedded`:\r\n```\r\nbin/openssl s_client -connect datadog-proxy.local.corp.stripe.com:3834 -CAfile /opt/datadog-agent/agent/datadog-cert.pem -tls1_2\r\n```\r\nVerify return code: 27 (certificate not trusted)\r\n\r\nI can try and use the cert required directly:\r\n```\r\nbin/openssl s_client -connect datadog-proxy.local.corp.stripe.com:3834 -CAfile /etc/ssl/certs/DigiCert_Global_Root_CA.pem -tls1_2\r\n```\r\n\r\nEverything works. Yay!\r\n\r\nBut I'd rather specify a CApath (which I can't seem to do) or have your included cert have this DigiCert CA cert. What am I missing?"},"comment":{"url":"https://api.github.com/repos/DataDog/dd-agent/issues/comments/149931519","html_url":"https://github.com/DataDog/dd-agent/issues/1964#issuecomment-149931519","issue_url":"https://api.github.com/repos/DataDog/dd-agent/issues/1964","id":149931519,"user":{"login":"gphat","id":45159,"avatar_url":"https://avatars.githubusercontent.com/u/45159?v=3","gravatar_id":"","url":"https://api.github.com/users/gphat","html_url":"https://github.com/gphat","followers_url":"https://api.github.com/users/gphat/followers","following_url":"https://api.github.com/users/gphat/following{/other_user}","gists_url":"https://api.github.com/users/gphat/gists{/gist_id}","starred_url":"https://api.github.com/users/gphat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gphat/subscriptions","organizations_url":"https://api.github.com/users/gphat/orgs","repos_url":"https://api.github.com/users/gphat/repos","events_url":"https://api.github.com/users/gphat/events{/privacy}","received_events_url":"https://api.github.com/users/gphat/received_events","type":"User","site_admin":false},"created_at":"2015-10-21T15:26:40Z","updated_at":"2015-10-21T15:26:40Z","body":"Cross ping that I'd love some eyes on [puppet-datadog-agent#123](https://github.com/DataDog/puppet-datadog-agent/pull/123), since it gives me the ability to override this without heavily vendoring the puppet module. :smile: "}}