"unable to get local issuer certificate" npm.sap.com HANA Express Edition

[rpaijmans]

When building a Node JS Module in SAP Web IDE for HANA in SAP HANA Express Edition Virtual Machine I get a build failure on a missing package (xlsx). It should be available in https://npm.sap.com (which I have added as UPSTREAM_LINK for app di-local-npm-registry). When tailing the log file for app di-local-npm-registry it shows following message:

http --> ERR, req: 'GET https://npm.sap.com/xslx', error: unable to get local issuer certificate (connecting to npm.sap.com:443)

Is it necessary to add the certificate path to a trusted cacert store for HANA Express Edition or npm ? If so, how can it be added?

Kind regards,

Richard

[Former Member]

Hi Richard,

Do I understand correctly that your problem was solved?

Do we need to reproduce and investigate the issue?

Nonetheless, as a general guidance I would like to share two links that might help.

HANA Security guide:

https://help.sap.com/viewer/b3ee5778bc2e4a089d3299b82ec762a7/2.0.02/en-US/171d3f43e73b4d7cbe98ece5d7...

HANA Security Checklists and Recommendations (see network configuration):

https://help.sap.com/viewer/742945a940f240f4a2a0e39f93d3e2d4/2.0.02/en-US/ce5fcfe5458e45ee9db2517d39...

Best regards,

Yaniv

[rpaijmans]

I copied the certification path of https://npm.sap.com/ certificate to directory /var/lib/ca-certificates/pem . If I am right this solved the "unable to get local issuer certificate" for npm.sap.com.