title: SSL validation failed (ZScaler)
body: <p>I'm on Windows 10 Enterprise.
  The company has ZScaler installed, which is causing SSL validation failures when I'm attempting to connect to AWS &amp; Github. The --no-verify-ssl flag forces things to work, but I'd prefer to configure the cert using --cabundle.</p>
  <p><strong>AWS CLI error</strong></p>
  <pre><code>$ aws s3 ls s3://MYBUCKET/folder/
  SSL validation failed for https://s3.us-east-2.amazonaws.com/MYBUCKET?list-type=2&amp;prefix=folder%2F&amp;delimiter=%2F&amp;encoding-type=url [Errno 2] No such file or directory
  </code></pre>
  <p><strong>Same issue for Github</strong></p>
  <pre><code>$ git clone https://github.com/USERNAME/myproject.git
  Cloning into 'myproject'...
  fatal: unable to access 'https://github.com/USERNAME/myproject.git/': SSL certificate problem: unable to get local issuer certificate
  </code></pre>
  <p><strong>My attempt to fix:</strong></p>
  <pre><code>echo | openssl s_client -servername s3.us-east-2.amazonaws.com -connect s3.us-east-2.amazonaws.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' &gt; aws-s3-us-east-2.crt
  
  openssl x509 -in aws-s3-us-east-2.crt -out aws-s3-us-east-2.pem
  
  aws s3 ls s3://MYBUCKET/ --ca-bundle aws-s3-us-east-2.pem
  </code></pre>
  <p>Still results in error:</p>
  <pre><code>[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1076)
  </code></pre>
  <p>Can I fix this myself or do I need some magical cert from our ZScaler admin?</p>