SSL Communication

By default, DCLI verifies SSL certificates for HTTPS requests and throws an error message if it is unable to verify the certificate.

DCLI bundles certificates from certifi.io by using the cacert.pem file provided in the DCLI package. If you want to override this certification method, you have the following options.

  • Use the DCLI_CACERTS_BUNDLE environment variable to specify a path to a custom certificates store file.
  • Use the +cacert-file DCLI option to specify a path to a custom certificates store file.
  • Use the +skip-server-verification DCLI option to skip certificates verification.
    Note: Skipping certificates verification presents a security risk.