Cannot use CLI against server with self signed SSL certificate

[holgerstolzenberg]

We are running a Zally server instance proxied by an Nginx VHost that also does the SSL offloading.
From our CI we try to run a Zally validation against this server using the CLI:

zally -l https://zally.theserver.org lint ./build/openapi.json

Causing this error:

Post "https://zally.theserver.org/api-violations": x509: certificate signed by unknown authority

As of now, it is not possible to skip the SSL validation.
Please add an argument for disabling the validation to the CLI (e.g. --skip-ssl-validation).

[tkrop]

@holgerstolzenberg Thanks for raising this issue. Seems not to be to difficult to implement, e.g. as described in minio/minio-go#1019, however, validation is an essential step in communication security we are strongly interested in. Since we are lacking the resources (and priority) at the moment, we would welcome your contribution here and spend the time to review and test it.

[holgerstolzenberg]

Could you please give me fingerpointer in the code, where the SSL stuff sits, so that I can have a preliminary look at it before making any promises!?

[holgerstolzenberg]

Any plans when this is going to be released?

[vadeg]

@holgerstolzenberg most probably next week