<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Hi,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The rt-mailgate tool has a --no-verify-ssl option, I was wondering if the “rt” command line tool has a similar option?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I ask because we have a self signed cert that just doesn’t seem to play nice with LWP. It used to work fine in RT3 but we upgraded to RT4 yesterday and the newer version of LWP isn’t having any of it.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Cert verifies OK:<o:p></o:p></p><p class=MsoNormal>root@ariel:~# openssl verify /etc/ssl/certs/rt.ourdomain.com.au.crt<o:p></o:p></p><p class=MsoNormal>/etc/ssl/certs/rt.ourdomain.com.au.crt: OK<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>But rt doesn’t like it:<o:p></o:p></p><p class=MsoNormal>root@ariel:~# rt list<o:p></o:p></p><p class=MsoNormal>Query:Status!='resolved' and Status!='rejected'<o:p></o:p></p><p class=MsoNormal>rt: Server error: Can't connect to rt.ourdomain.com.au:443 (certificate verify failed) (500)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Which is because of lwp:<o:p></o:p></p><p class=MsoNormal>root@ariel:~# lwp-request https://rt.ourdomain.com.au<o:p></o:p></p><p class=MsoNormal>Can't connect to rt.ourdomain.com.au:443 (certificate verify failed)<o:p></o:p></p><p class=MsoNormal>SSL connect attempt failed error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at /usr/local/share/perl/5.18.2/LWP/Protocol/http.pm line 47.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I realise this isn’t an RT problem as it is really LWP, but it would be nice if the RT CLI supported a --no-verify-ssl option to workaround these situations. As it stands I had to edit the code of /opt/rt4/bin/rt and added the following on line 54 which allowed us to move forward, but this will be an issue for future upgrades:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>BEGIN { $ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0;}<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Any thoughts?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Cheers,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='mso-fareast-language:EN-AU'>Dion Gullotta<br>Far Edge Technology<br><br>p. 02 84251400<br><a href="http://www.faredge.com.au"><span style='color:#0563C1'>http://www.faredge.com.au</span></a> <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-AU><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>