SSL Error while running $edgeHub on local docker

Roopak Ingole 51

I am developing IoT Edge Module on my windows 10 machine (company provided machine with proxy) as host for Raspberry Pi IoT Edge. I have Docker for Windows installed on my machine. I would like to simulate my module on host docker to test. I am able to build the docker Image successfully, but when try to run $edgeHub on Docker, i am getting below error.

Login Succeeded
Network azure-iot-edge-dev is external, skipping
ERROR: HTTPSConnectionPool(host='xxxxxxxxxxxxxx.azure-devices.net', port=443): Max retries exceeded with url: /devices/iotedge2/modules/$edgeHub?api-version=2018-06-30 (Caused by SSLError(SSLError("bad handshake: Error([('SSL
routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

Any help to resolve this would be appreciated.

QuantumCache 20,026 Reputation points

2020-07-23T20:34:50.52+00:00

Hello @Roopak Ingole , Thanks for reaching out to us!,

Have you deployed the module to Raspberry PI ? or

Are your trying to debug/simulate it locally on windows 10 machine ?

Please let us know if you have followed any documentation on this ?

Have you referred to Configure an IoT Edge device to communicate through a proxy server.
QuantumCache 20,026 Reputation points

2020-07-27T05:38:04.967+00:00

Hello @Roopak Ingole ,Just checking back, could you please let us know if you need further help in this matter.
Roopak Ingole 51 Reputation points

2020-07-27T20:51:27.727+00:00

Hello Satish,
To answer some of the questions above,
I have developed the module for RaspberryPi, but have not deployed it on it yet.
I wanted to test my module on locally on my windows 10 machine on Docker and IoT Hub.
When I launch run edgeHub on Docker it gives me that SSL error.

I looked for the documentation for this issue and couldn't find anything.
I referred the documentation that you recommended, do I have to follow the same for local docker image as well ?

Thanks
Roopak

1 answer

QuantumCache 20,026 Reputation points

2020-07-28T00:10:28.187+00:00

Hello @Roopak Ingole , For my Raspberry Pi 3, I have followed the below documents to develop and debug my IoTEdge Modules locally. Please follow and try these documents once on your Windows 10 Dev machine and let us know if that helps to get through this issue. Please note that we have the facility of IoT Edge Simulator available to debug these modules locally on VS2019. Which is very useful!

Use Visual Studio 2019 to develop and debug modules for Azure IoT Edge
Use Visual Studio Code to develop and debug modules for Azure IoT Edge
Please sign in to rate this answer.

1 person found this answer helpful.
Roopak Ingole 51 Reputation points

2020-07-29T13:13:22.973+00:00

I followed Visual Studio Code guide multiple times but still not able to get it to work locally. We see the same problem with others as well. Seems like all the network requests are going through "Cisco Anyconnect Umbrella" proxy which is causing this problem. Any suggestions on how to bypass this proxy ?

QuantumCache 20,026 Reputation points

2020-07-29T13:30:23.093+00:00

Hello @Roopak Ingole ,Have you referred to Configure an IoT Edge device to communicate through a proxy server. ?

Roopak Ingole 51 Reputation points

2020-07-30T18:14:44.763+00:00

Hello Satish,
I did refer the document regarding the proxy, but couldn't get it to work.
What I found through our IT is that we need to provide the custom root CA to the container to get this handshake done with our proxy.
Would you or anyone happen to know how to provide this certificate to the containers through manifest or dockerfile?

QuantumCache 20,026 Reputation points

2020-07-30T18:31:19.773+00:00

Hello @Roopak Ingole , Have you referred to the below document on how to install cert on the IoTEdge device?

Install certificates on the device
This document is about "Install your certificate chain on the IoT Edge device and configure the IoT Edge runtime to reference the new certificates."

QuantumCache 20,026 Reputation points

2020-07-31T17:48:10.877+00:00

Hello @Roopak Ingole , Just checking back, could you please let us know if you need further help in this matter.
Sign in to comment