Skip to content

Support specifying root CAs #911

@Ducatel

Description

@Ducatel

Hi all,

I have a little problem when I try to connect my Prometheus to cAdvisor client secure by SSL + basic auth.

In my Prometheus, I have this error message:

Get https://db1.xxxx.com:5458/metrics: x509: certificate signed by unknown authority

But when I use Firefox or Chrome to connect to https://db1.xxxx.com:5458/metrics, both of them says ok, certificate validate by Gandi

Also when I check my certificate with the gandi CA file, it's ok too

openssl verify -CAfile GandiStandardSSLCA2.pem certificate.crt
certificate.crt: OK

My Prometheus configuration:

global:
    scrape_interval:     5s
    evaluation_interval: 15s

scrape_configs:

  - job_name: prometheus
    scheme: https
    basic_auth:
    username: admin
    password: 1234

    scrape_interval: 5s
    scrape_timeout: 10s

    target_groups:
    - targets: ['db1.xxxx.com:5458']

Also I use docker to mount all of this services. (alos tested with Prometheus version 0.15.0rc3 (branch: master, revision: d437fce))

So do you have any idea about this problem ?
Thank for your help.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions