Adding SSL certificates or disabling SSL for HTTPS clients?

[stefx]

Is there a way to add SSL certificates to the yaks image or disabling SSL when using HTTPS clients?

We are getting the following error when calling an HTTPS endpoint from the yaks base image.
I/O error on GET request for "URL": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

This is a very basic feature when using yaks for HTTPS integration testing. It would be great if we could disable SSL verification with a configuration.

[christophd]

I don't think it is possible to disable the SSL verification when using the HTTPS clients as the server requests the client to use the proper certificates.

You should be able to create a K8s secret holding the certificates and volume mount that secret into the test Pod.

[christophd]

https://github.com/citrusframework/yaks/tree/main/examples/secrets

[stefx]

Regarding the yaks usage of the secrets, it appears there is a limitation on the number of secrets that can be used by yaks. If I label two secrets with the yaks.citrusframework.org/test label, only the first one gets used and loaded in the test. Is there a possibility of using more than one secret?

[christophd]

Yes, I have had same issue recently, too. A fix and improvement on volume mounts of secrets in YAKS is already in the making. PR is coming soon.

With that you will be able to bind multiple secrets to a test accessing the content of the secrets either via test variables or by loading files (e.g. certificates) from a secret.

[christophd]

See #504