Add option to accept self-signed certificates

[adambarreiro]

Hi,

First of all, thanks for creating and developing Bruno!
I started to migrate my Postman collections to Bruno, and I'm facing the following error when running requests:

Error invoking remote method 'send-http-request': Error: self signed certificate in certificate chain

The target server is indeed using self-signed certificates, as it is a development server used for testing.
Would it be possible to add an option to ignore this case?

I could do a tiny workaround in macOS using the terminal:

NODE_TLS_REJECT_UNAUTHORIZED='0' /Applications/Bruno.app/Contents/MacOS/Bruno

Thanks in advance!

[adambarreiro]

I just found the option in the UI. Apologies for the noise!

[helloanoop]

No worries :)

[piyh]

For all those finding this through search, the option is on settings off the gear icon on the bottom left, not the top right.

[ebricca]

for those that got a preference save error

one has to set the proxy.port to a number e.g. 1000 even when not used

( output from devtools :)
Error: Error invoking remote method 'renderer:save-preferences': ValidationError: proxy.port must be a number type, but the final value was: NaN (cast from the value ""). )

[Schm1tz1]

Hi all, seems like I'm running into the same issue. I am using a self-signed cert with my own custom CA. Deactivating SSL Certificate Validation does not work even after restart of Bruno - I am still getting Error invoking remote method 'send-http-request': Error: self signed certificate in certificate chain. Setting the env-var as @adambarreiro mentioned works for me.
I'm using Bruno 0.27.2 on macOS 13.6

[geraintwjones]

I'm getting Error: socket hang up now. Works fine with Insomnia, so I know the server's responding. Must be something I've not done, or have done incorrectly in Bruno.

I tried setting request timeout to 1000ms, no response. Insomnia gets a response in 560ms.

[Shackelford-Arden]

I'm in the same boat as @Schm1tz1 :

• I've disabled SSL Verification
• I've opened Bruno w/ the same environment variable (NODE_TLS_REJECT_UNAUTHORIZED=0)

I'm on Bruno 1.3.0 MacOS 14.1.2

[BrandonGillis]

Hello @Shackelford-Arden and @geraintwjones , could you please try again on Bruno 1.3.2, as it include fixes related to localhost environment if you was having the SSL issue on localhost

[geraintwjones]

I'm getting Error invoking remote method 'send-http-request': Error: socket hang up.

[geraintwjones]

[geraintwjones]

It's really annoying that I can't see what's in that client certificate.

[Shackelford-Arden]

@BrandonGillis having updated to 1.3.2, I still need to set the environment variable when opening Bruno to make calls against self-signed certs w/ validation turned off.

Just for clarity, here is the SSL/TLS Cerficiate Verification turned off:

Error when attempting to make call against self-signed resource:

Same settings but running Bruno like this:

NODE_TLS_REJECT_UNAUTHORIZED='0' /Applications/Bruno.app/Contents/MacOS/Bruno

Gets the response I expected.

[geraintwjones]

@Shackelford-Arden I tried that. I get the same error as before. Also, by starting Bruno like this...

NODE_TLS_REJECT_UNAUTHORIZED='0' /Applications/Bruno.app/Contents/MacOS/Bruno

I get the following output...

bruno-log.txt

[helloanoop]

Support for specifying Custom CA is now available in v1.6.0 🎉 🎉
Thank you @BrandonGillis for working on this (pr: #1155)

@Shackelford-Arden @Schm1tz1 @geraintwjones The release also involves fixes for the issue you were facing. Can you download 1.6.0 and see if it solves your issue ?

[ivycristina]

I downloaded version 1.6.0 and I'm getting this error, can anyone help me?

[helloanoop]

@ivycristina Can you share more details

Did you try disabling ssl?
Are you using custom CA cert ?

[ivycristina]

@ivycristina Can you share more details

Did you try disabling ssl? Are you using custom CA cert ?

I disabled SSL because it was giving another error and I threw it on the internet and said to disable it, I'm not using a certificate, I just brought the collection directly from postman to Bruno and there in postman it works without any token or certificate and here it doesn't want to work

[Schm1tz1]

@helloanoop - at least for me I can say that the issues are gone now, thanks a lot!

[Shackelford-Arden]

@helloanoop I'm on Bruno 1.6.1 and I still need to use the following to successfully make HTTPS.

Again for reference, I do have SSL verification disabled:

I do have a SOCKS5 proxy for these requests in particular.

Error message I'm getting:

Seems like there needs to be a way to make sure that validation for all certificates that are presented is skipped.

[Shackelford-Arden]

As an additional point there, if I run the same request via cURL while telling it to use the same proxy, the request is successful

[martinsefcik]

@helloanoop @Shackelford-Arden
I think problem is in implementation of SOCKS proxy support.

Currently it is implemented like this:

if (socksEnabled) {
      const socksProxyAgent = new SocksProxyAgent(proxyUri);
      request.httpsAgent = socksProxyAgent;
      request.httpAgent = socksProxyAgent;
} 

So it completely ignores SSL verification and certificates configuration in httpsAgentRequestFields variable.

I think it should be changed to something like this:

    if (socksEnabled) {
      request.httpsAgent = new SocksProxyAgent(
          proxyUri,
          Object.keys(httpsAgentRequestFields).length > 0 ? { ...httpsAgentRequestFields } : undefined
      );
      request.httpAgent = new SocksProxyAgent(proxyUri);
} 

the same way how it is implemented for http(s) proxy.

[Shackelford-Arden]

@martinsefcik Nice find :)

As a quick test, I did the following to see if that would work:

• Cloned the repo
• Edited the following files w/ your suggestion:
  • packages/bruno-cli/src/runner/run-single-request.js
  • packages/bruno-electron/src/ipc/network/index.js
• Following the steps provided in the contributing README on building Bruno
• Ran Bruno from the source build
• Ran the requests as I had before, and it worked 😄

[martinsefcik]

@Shackelford-Arden

• Ran the requests as I had before, and it worked 😄

Great! I can prepare PR for that tomorrow.

[martinsefcik]

@geraintwjones @ivycristina Were you using also SOCKS proxy as @Shackelford-Arden when you had these errors ?

[martinsefcik]

@Shackelford-Arden

• Ran the requests as I had before, and it worked 😄

Great! I can prepare PR for that tomorrow.

I created separate issue #1419 for that and PR #1420

[ivycristina]

hello, I am using bruno-cli and wanted to generate a reports of the tests in html does it have this option?