Adding a custom CA Root certificate to GCloud utility (or Python generally) on Windows

Question

I'm using gcloud on Windows to develop GAE stuff. The network here has a MITM root certificate by design so all SSL traffic can be snooped; I can install the root cert easily into a browser or Windows certificate store, but can't successfully get this work for Python, or more specifically, gcloud (which has its own Python bundled). The answers at How to add a custom CA Root certificate to the CA Store used by Python in Windows? don't work - I've tried setting SSL_CERT_DIR and SSL_CERT_FILE environment variables to no avail, and the pip.ini solution isn't applicable as I'm not using pip.

Answer 1

Assuming all your credential setup is in order, for MITM you likely also need to set proxy settings, for instance

gcloud config set proxy/address 127.0.0.1
gcloud config set proxy/port 8080
gcloud config set proxy/type http

replacing address/port for your MITM and then either one of these:

gcloud config set auth/disable_ssl_validation  True

or

gcloud config set core/custom_ca_certs_file cert.pem

Test by running some command, for example

gcloud projects list

You can use --log-http additional gcloud flag and/or tools like burp to further debug what certs/proxies are being used.