SSL Configuration for Private Locations¶

The escape-cli will by default use the SSL certificates of your local machine. If you are running the escape-cli inside a container, it will use the certificates of this container.

See Environment Variables for the defaults and the complete TLS configuration reference.

Allowing insecure SSL connections¶

If you want to allow insecure SSL connections (skipping TLS certificate verification), you can set the ESCAPE_SSL_INSECURE="true" environment variable.

Adding Custom SSL CA Certificates¶

If you have one or more custom SSL Certificate Authorities, you can configure them using the ESCAPE_SSL_CERT_PATH environment variable.

Single CA Certificate¶

To add a single custom CA certificate, set the ESCAPE_SSL_CERT_PATH environment variable to point to your certificate file:

services:
  private-location:
    image: escapetech/cli:latest
    environment:
      - ESCAPE_API_KEY=<ESCAPE_API_KEY>
      - ESCAPE_SSL_CERT_PATH=/certs/custom-ca.pem
    volumes:
      - ./certs:/certs

Multiple CA Certificates¶

The ESCAPE_SSL_CERT_PATH variable supports PEM files containing multiple CA certificates. To configure multiple CA certificates, concatenate them into a single PEM file with each certificate in standard PEM format:

-----BEGIN CERTIFICATE-----
MIIDXTCCAkWgAwIBAgIJAKJ...
(first CA certificate)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEBzCCAu+gAwIBAgICEA...
(second CA certificate)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIQdY...
(third CA certificate)
-----END CERTIFICATE-----

Then reference this combined certificate file:

services:
  private-location:
    image: escapetech/cli:latest
    environment:
      - ESCAPE_API_KEY=<ESCAPE_API_KEY>
      - ESCAPE_SSL_CERT_PATH=/certs/combined-ca-bundle.pem
    volumes:
      - ./certs:/certs