2

I am trying to install bicep cli, I am using coporate laptop, I get the following error I tried with and without VPN and get the same error: My Azure CLI version is: 2.44.1 and I am using windows 10

 Error while attempting to retrieve the latest Bicep version: HTTPSConnectionPool(host='aka.ms', port=443): Max retries exceeded with url: /BicepLatestRelease (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)'))).

I searched the net these answers didn't solve my problem (enter link description here and enter link description here

MJ X
  • 8,506
  • 12
  • 74
  • 99
  • It appears that some server is presenting an untrusted "self signed certificate in certificate chain". Do you have to use a proxy server? Is this server configured on your laptop's OS? What happens if you navigate to https://aka.ms/BicepLatestRelease with a web browser? – bahrep Jan 24 '23 at 07:51
  • it downloads a file latest – MJ X Jan 25 '23 at 05:18
  • Check Julian's answer. As I suspected, the problem is with your proxy. – bahrep Jan 25 '23 at 10:56

1 Answers1

1

It seems like you are sitting behind a HTTPS intercepting proxy. You should reach out to your enterprise IT to resolve this.

Get the CA Certificates used by the proxy, save them locally and tell the Azure CLI where to find it:

export REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt

Your IT might also be able to except Azure and GitHub from HTTPS interception.

Security Risk You can also disable the certificate verification. But it is not recommended and will be a security risk.

export AZURE_CLI_DISABLE_CONNECTION_VERIFICATION=anycontent
Julian Hüppauff
  • 233
  • 2
  • 9