The Vault snap doesn’t work with a local certificate authority on Ubuntu 18.04.
The unzipped vault binary works:
user1@ubuntu18.04:~$ /usr/local/bin/vault kv get secret/user1
=== Data ===
Key Value
pw 1234
But the snap does not work:
user1@ubuntu18.04:~$ /snap/bin/vault kv get secret/user1
Get https://192.168.1.10:8200/v1/sys/internal/ui/mounts/secret/user1: x509: certificate signed by unknown authority
The workaround is to uninstall the snap and install the Vault binary from Hashicorp’s site:
sudo -i
snap remove vault && cd /usr/local/bin && wget https://releases.hashicorp.com/vault/1.1.3/vault_1.1.3_linux_amd64.zip && unzip vault_1.1.3_linux_amd64.zip