If I export HTTPS_PROXY=http://localhost:8080 with mitmproxy running, I get this from the CLI:
Please ensure you have network connection. Error detail: ("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",)
For the other CLIs, there is an env var that can be exported to disable the strict checking and allow this for debug scenarios. Is that an equivalent for az?
(I'm looking for the equivalent of NODE_TLS_REJECT_UNAUTHORIZED in xplat-cli.)
(The CA is trusted by my machine as well, I can curl/wget https://www.google.com with traffic appearing in mitmproxy without any insecure flags)
@colemickens try setting the following environment variables: ADAL_PYTHON_SSL_NO_VERIFY and AZURE_CLI_DISABLE_CONNECTION_VERIFICATION.
@colemickens did this unblock your scenario?
Yes. Thank you!
Most helpful comment
@colemickens try setting the following environment variables: ADAL_PYTHON_SSL_NO_VERIFY and AZURE_CLI_DISABLE_CONNECTION_VERIFICATION.