Skip to main content

Post a NetSkope update, composer would fail when running any command that required accessing an external package.  Actually initially all external traffic was being blocked.  The error was similar to

curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.se/docs/sslcerts.html

This error was also generated when running a basic command

curl https://www.google.com.au

Seems like the updated Netskope client Windows machine is blocking SSL traffic.  While Netskope client doesn't itself inspect SSL traffic but it breaks the SSL traffic going directly to destination by acting as a proxy and present its own certificate and sends traffic to Netskope proxy for ssl inspection.

 

How to resolve

To solve this you can get a Netskope CA certificate from your Windows machine from the following path:

C:\ProgramData\netskope\stagent\data

Copy nscacert.pem file to your certs directory.  For me the certs directory was located:

/etc/ssl/certs/

 

Related articles

Andrew Fletcher20 May 2024
Create a copy of files that go to the tmp directory
To review the content of files being generated in the /tmp directory on an Ubuntu server before Microsoft Defender removes them, you can use several approaches.  Following is the approach we took. Real-Time MonitoringYou can set up a script to monitor the /tmp directory and log the...