Skip to content

The SSL_CERT_FILE environment variable

Emiliano Ticci edited this page Dec 2, 2013 · 1 revision

If you're using Vagrant < 1.4 and you intend to use the public API endpoint, which is the default, you have to set the SSL_CERT_FILE environment variable.

The net/http library of the Vagrant's embedded ruby does not check the validity of an SSL certificate during a TLS handshake. This breaks all the calls to the SoftLayer API, making the plugin unusable.

For fixing this issue, you have to make ruby aware of a certificate authority bundle by setting SSL_CERT_FILE:

Linux

  • To set this in your current command prompt session, type:

    export SSL_CERT_FILE=/opt/vagrant/embedded/cacert.pem

  • To make this a permanent setting, add this in .bashrc or .profile.

Mac OS X

  • To set this in your current command prompt session, type:

    export SSL_CERT_FILE=/Applications/Vagrant/embedded/cacert.pem

  • To make this a permanent setting, add this in /etc/launchd.conf.

Windows

  • To set this in your current command prompt session, type:

    set SSL_CERT_FILE=C:\HashiCorp\Vagrant\embedded\cacert.pem

  • To make this a permanent setting, add this in your control panel.