Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

clarify use of env vars for self-signed certs in http remotes #2138

Merged
merged 1 commit into from
Feb 2, 2021
Merged

clarify use of env vars for self-signed certs in http remotes #2138

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 8 additions & 14 deletions content/blog/2021-01-26-january-21-community-gems.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,22 +61,16 @@ some speed tests for your use case. We'd love to know what you find!

### [Q: My DVC remote is a server with a self-signed certificate. When I push data, DVC is giving me an SSL verification error- how can I get around this?](https://discord.com/channels/485586884165107732/563406153334128681/800707271502856222)

If you're using an `http`-addressable storage, try modifying your DVC remote
configuration to disable SSH verification:

```dvc
$ dvc remote modify <myremote> ssl_verify false
```

If your storage is another format, you'll want to check into the manufacturer's
docs to see how you can make your certificate pass verification. For example, if
you use S3 or S3-compatible storage, you can configure your AWS CLI to use a
custom certificate path.
On S3 or S3-compatible storage, you can configure your AWS CLI to use a custom
certificate path.
[As suggested by their docs](https://docs.aws.amazon.com/credref/latest/refdocs/setting-global-ca_bundle.html),
you'll set the environmental variable `AWS_CA_BUNDLE` to your `.pem` file.
you can also set the environment variable `AWS_CA_BUNDLE` to your `.pem` file.

Similarly, on HTTP and Webdav remotes, there's `REQUESTS_CA_BUNDLE` environment
variable that you can set your self-signed certificate file to.

Then, when DVC tries to access your S3 storage via `boto`, you should be able to
get past SSL verification!
Then, when DVC tries to access your storage, you should be able to get past SSL
verification!

### [Q: I want to be able to make my own plots in Python with data points from my `dvc plots`, including older versions of those plots. What do you recommend to get the raw historical data?](https://discord.com/channels/485586884165107732/563406153334128681/799617584336338954)

Expand Down