zrok share public behind corporate proxy: certificate signed by unknown authority about zrok HOT 4 CLOSED

Did you try the --insecure option? zrok share public --insecure localhost:8080?

from zrok.

Thanks for the quick reply.
The --insecure flag does unfortunately not prevent the error.

from zrok.

It looks like this might be an issue with the underlying OpenZiti connectivity. Let me see what I can find out, but I suspect there may not be anything we can do, as that mTLS authentication is a fundamental component of the OpenZiti security model.

from zrok.

Hi @phlppnhllngr. Unfortunately, I don't think there's anything that can be done in these situations. zrok is built on and around OpenZiti which is very much based on mutually secured TLS connections. When there's a 'person in the middle' that's intercepting all traffic trying to terminate TLS with a certificate that is untrusted by the OpenZiti SDKs, ziti will not allow the connection.

Other people in the past have had luck with getting these sorts of URLs whitelisted by the IT department. (while others have not) if you explain what you're doing and why, you might be able to get this site on the list of "don't bother trying to inspect this url", but every organization is different...

Sorry there's not more we can do for you. If we discover a reasonable way to work around this for you, I'll try to follow up here.

Also note that the proper location for discussions is our discourse site. It's monitored by more people than github issues and you might get answers faster. :) It's here: https://openziti.discourse.group/

from zrok.