ssl_client: github.com: certificate verification failed: self signed certificate in certificate chain

[tzieleniewski]

Hey,

We are using latest HEAD from master.
commit a455804

Environment

• OS: MacOS 10.15 Catalina
• Docker: 19.03.12

When we run docker-compose up -d we get the following error:

Connecting to github.com (140.82.118.4:443)
ssl_client: github.com: certificate verification failed: self signed certificate in certificate chain
wget: error getting response: Connection reset by peer

Please point what are we missing.

The bigger part of the console output

(21/21) Installing jq (1.6-r0)
Executing busybox-1.29.3-r10.trigger
OK: 349 MiB in 74 packages
sh: 200: unknown operand
Downloading Kafka from https://mirrors.gethosted.online/apache/kafka/2.5.0/kafka_2.12-2.5.0.tgz
Connecting to mirrors.gethosted.online (51.195.168.80:443)
kafka_2.12-2.5.0.tgz   1% |                                |  656k  0:01:30 ETA
kafka_2.12-2.5.0.tgz   6% |**                              | 4000k  0:00:28 ETA
kafka_2.12-2.5.0.tgz  15% |*****                           | 9472k  0:00:16 ETA
kafka_2.12-2.5.0.tgz  25% |********                        | 15.2M  0:00:11 ETA
kafka_2.12-2.5.0.tgz  37% |***********                     | 22.0M  0:00:08 ETA
kafka_2.12-2.5.0.tgz  49% |***************                 | 29.2M  0:00:06 ETA
kafka_2.12-2.5.0.tgz  62% |********************            | 36.9M  0:00:04 ETA
kafka_2.12-2.5.0.tgz  75% |************************        | 44.2M  0:00:02 ETA
kafka_2.12-2.5.0.tgz  88% |****************************    | 52.2M  0:00:01 ETA
kafka_2.12-2.5.0.tgz 100% |********************************| 58.7M  0:00:00 ETA

Connecting to github.com (140.82.118.4:443)
ssl_client: github.com: certificate verification failed: self signed certificate in certificate chain
wget: error getting response: Connection reset by peer
ERROR: Service 'kafka' failed to build: The command '/bin/sh -c apk add --no-cache bash curl jq docker  && chmod a+x /tmp/*.sh  && mv /tmp/start-kafka.sh /tmp/broker-list.sh /tmp/create-topics.sh /tmp/versions.sh /usr/bin  && sync && /tmp/download-kafka.sh  && tar xfz /tmp/kafka_${SCALA_VERSION}-${KAFKA_VERSION}.tgz -C /opt  && rm /tmp/kafka_${SCALA_VERSION}-${KAFKA_VERSION}.tgz  && ln -s /opt/kafka_${SCALA_VERSION}-${KAFKA_VERSION} ${KAFKA_HOME}  && rm /tmp/*  && wget https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-${GLIBC_VERSION}.apk  && apk add --no-cache --allow-untrusted glibc-${GLIBC_VERSION}.apk  && rm glibc-${GLIBC_VERSION}.apk' returned a non-zero code: 1

[tzieleniewski]

We've got it working.
We found clues in this thread
https://github.community/t/getting-ssl-certificate-problem-self-signed-certificate-in-certificate-chain-on-pull/971/49
We needed to disable VPN connection.