From c295a56484743c73310a12ad2cc2417f9f34aa17 Mon Sep 17 00:00:00 2001
From: danielsdeleo <dan@chef.io>
Date: Tue, 3 Nov 2015 13:20:47 -0800
Subject: Skip retries of certificate verification failures

---
 lib/chef/http.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/chef/http.rb b/lib/chef/http.rb
index 28bbef3828..c2bb58f88f 100644
--- a/lib/chef/http.rb
+++ b/lib/chef/http.rb
@@ -330,7 +330,7 @@ class Chef
         end
         raise Timeout::Error, "Timeout connecting to #{url}, giving up"
       rescue OpenSSL::SSL::SSLError => e
-        if http_retry_count - http_attempts + 1 > 0
+        if (http_retry_count - http_attempts + 1 > 0) && !e.message.include?("certificate verify failed")
           Chef::Log.error("SSL Error connecting to #{url}, retry #{http_attempts}/#{http_retry_count}")
           sleep(http_retry_delay)
           retry
-- 
cgit v1.2.1