SELF_SIGNED_CERT_IN_CHAIN when calling self signed certificate

[jecuendet]

In our setup, Dependency-Track is installed with a self signed certificate
When uploading the generated SBOM, I have the following error:
Unable to submit the SBOM to the Dependency-Track server RequestError: self-signed certificate in certificate chain

I have checked the following solutions without success:

• npm config set strict-ssl false
• cafile=/usr/local/share/ca-certificates/vd.ch/.pem
• export NODE_TLS_REJECT_UNAUTHORIZED=0

Without success...
Any idea?
Thanks a lot

[prabhu]

We need to add a new option here https: {rejectUnauthorized: false} based on the presence of some environment variable.

cdxgen/index.js

Line 6449 in 6be7dfb

return await got(serverUrl, {

Reference:

https://github.com/sindresorhus/got/blob/bc17e8120b527bb54352474300b5c71cf465ee7f/documentation/5-https.md?plain=1#L25

[jecuendet]

Who will code this? You?
Or are you waiting for a PR from me?

[prabhu]

Contributions are welcome!