Skip to content

feat(secops-soar): improve error message and docs for SOAR certifi issue#238

Open
s1v4-d wants to merge 1 commit intogoogle:mainfrom
s1v4-d:feat/191-improve-soar-certifi-error-message
Open

feat(secops-soar): improve error message and docs for SOAR certifi issue#238
s1v4-d wants to merge 1 commit intogoogle:mainfrom
s1v4-d:feat/191-improve-soar-certifi-error-message

Conversation

@s1v4-d
Copy link

@s1v4-d s1v4-d commented Feb 21, 2026

Catch SSL certificate verification errors in the SOAR MCP server and display actionable error messages instead of the generic 'Failed to fetch valid scopes from SOAR' message.

  • Add SoarSSLError and SoarConnectionError custom exceptions in http_client.py
  • Add _is_cert_verify_error() helper that walks the exception cause chain
  • Add _handle_ssl_error() to detect and re-raise SSL/connection errors with platform-aware fix instructions (macOS Install Certificates.command, pip install certifi)
  • Update bindings.py and server.py to propagate and log specific error types
  • Add SSL_CERTIFI_ERROR_MESSAGE, CONNECTION_ERROR_MESSAGE, and CREDENTIALS_ERROR_MESSAGE constants to consts.py
  • Add Troubleshooting section to server/secops-soar/README.md
  • Add SOAR SSL troubleshooting note to root README.md
  • Add 20 unit tests covering all error paths (SSL cert verify, generic SSL, connection refused, bad credentials, message content quality)

Closes #191

Catch SSL certificate verification errors in the SOAR MCP server and display actionable error messages instead of the generic 'Failed to fetch valid scopes from SOAR' message.

- Add SoarSSLError and SoarConnectionError custom exceptions in http_client.py
- Add _is_cert_verify_error() helper that walks the exception cause chain
- Add _handle_ssl_error() to detect and re-raise SSL/connection errors with
  platform-aware fix instructions (macOS Install Certificates.command, pip
  install certifi)
- Update bindings.py and server.py to propagate and log specific error types
- Add SSL_CERTIFI_ERROR_MESSAGE, CONNECTION_ERROR_MESSAGE, and
  CREDENTIALS_ERROR_MESSAGE constants to consts.py
- Add Troubleshooting section to server/secops-soar/README.md
- Add SOAR SSL troubleshooting note to root README.md
- Add 20 unit tests covering all error paths (SSL cert verify, generic SSL,
  connection refused, bad credentials, message content quality)

Closes google#191
@s1v4-d s1v4-d requested a review from a team February 21, 2026 19:16
@google-cla
Copy link

google-cla bot commented Feb 21, 2026

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Improve error message and docs for the SOAR certifi issue

1 participant