Search code examples
node.jssslssl-certificateteamcitynewman

newman CLI returns "error: unable to get local issuer certificate" in teamcity build

Using the newman nodeJS CLI to run a collection of postman test I get the following error:

error: unable to get local issuer certificate

It is run as part of a Teamcity CI build using the following command:

newman run https://www.getpostman.com/collections/<COLLECTION-ID-HERE>

It is run on windows and we have a corporate proxy server (ZScaler).

How to I get newman to work?

Solution

  • The issue is that newman cannot find (or does not know about) the self signed SSL certificate used by the proxy server that is configured in the windows certificate store. The easiest way to make newman (and actually any recent nodeJS app) aware of the certificate is to use an environment variable:

    on windows:

    SET NODE_EXTRA_CA_CERTS=c:\some-folder\certificate.cer

    on linux:

    export NODE_EXTRA_CA_CERTS=/c/some-folder/certificate.cer

    You may also need to set the proxy server url itself with the HTTP_PROXY=http://example.com:1234 env varirable as well.

    Alternatively the environment variables can be added to that teamcity builds runtime environment using the build parameters feature of Teamcity

    Note this is for Node.js 7.3.0 and above (and the LTS versions 6.10.0 and 4.8.0)