SSL certificate problem: certificate has expired


Topic: SSL certificate problem: certificate has expired

latakoo asked 8 months ago

Expected behavior The dependency should install without SSL problems

Actual behavior I'm getting the message "unable to access 'https://git.mdbootstrap.com/mdb/react/re-pro.git/': SSL certificate problem: certificate has expired"

Resources (screenshots, code snippets etc.)


patricksteyaert pro premium commented 8 months ago

I have the same problem! This seems to be happening every year...


latakoo commented 8 months ago

Indeed, I've seen reports of this happening last year and also 3 years ago


finleysg commented 8 months ago

Our builds have also been stuck all day: error fatal: unable to access 'https://oauth2:***@git.mdbootstrap.com/mdb/react/re-pro.git/': SSL certificate problem: certificate has expired


patricksteyaert pro premium commented 8 months ago

it also happened two years ago: https://mdbootstrap.com/support/angular/git-https-oauth2-certificate-expired-2b1b4/

yearly ritual it seems


finleysg commented 8 months ago

Might be useful to note that we see this only from our build agents in Azure, where git is configured to use open ssl:

http.sslbackend=openssl

Not a great experience, bringing down customer builds every year.


patricksteyaert pro premium commented 8 months ago

No news at all????


Sebastian Kaczmarek staff pro premium commented 8 months ago

We are working on this issue at this very moment. Sorry for the inconvenience.


finleysg commented 8 months ago

For those of you still blocked with this issue, you can target just the MDB git url and turn off ssl verification. It can be done per repo, globally (for the current user), or at the system level like we did below. Once the certificate issue is sorted out here, you should turn verification back on.

git config --system http.https://oauth2:<token>@git.mdbootstrap.com/mdb/react/re-pro.git.sslVerify false


catalog360 commented 7 months ago

We too are having the same issue.

npm ERR! fatal: unable to access 'https://oauth2:*@git.mdbootstrap.com/mdb/react/re-pro.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none npm ERR! npm ERR! exited with error code: 128

@Finleysg we tried that approach with --global to disable sslverify but didnt work unfortunately.


Marek Winiarski staff pro premium commented 7 months ago

This problem must be resolved on both sides, On server everything is updated to the latest version.

On client site the problem will still exist if: - your OS is not updated to the latest version, if you can't do this please - update your security tools, in Windows you can do this by package https://support.microsoft.com/en-us/topic/support-for-urgent-trusted-root-updates-for-windows-root-certificate-program-in-windows-a4ac4d6c-7c62-3b6e-dfd2-377982bf3ea5 if you can't do it, you can try - update npm, git, and all tools which you use to work, some apps use their own chain rules, for some people it helped,

In this instruction https://docs.certifytheweb.com/docs/kb/kb-202109-letsencrypt/#clients-browsers-etc has been described how to manually update ca-certificate. during instalation certificate of ISRG Root X1 please choose Local Machine option, sometime users choose second options, and istalled cert for only one user.

If this problem still exists, write to me:

How do you use OS, when was it updated, For which application this problem has occured, and specify its version Provide your IP.

Marek From MDB


patricksteyaert pro premium commented 7 months ago

I am deploying on aws with amplify and things still don't work. Getting pretty upset about all of this!


Marek Winiarski staff pro premium commented 7 months ago

@patricksteyaert Did you check out all recommended steps? Update npm, git, ca-certificates? What OS are you using? What tool are you using to pull the package? The problem is when you pull from our repo or how to push on AWS Amplify?


patricksteyaert pro premium commented 7 months ago

Marek,

I get the following error when amplify is building the front end:

npm ERR! /usr/bin/git ls-remote -h -t https://oauth2:*@git.mdbootstrap.com/mdb/angular/ng-uikit-pro-standard.git npm ERR! npm ERR! fatal: unable to access 'https://git.mdbootstrap.com/mdb/angular/ng-uikit-pro-standard.git/': SSL certificate problem: certificate has expired


Marek Winiarski staff pro premium commented 7 months ago

Hi Patricksteyaert,

Can you write what version of node.js and npm you have installed?

Does the bug arise when using Amplify AWS?


Adam Jakubowski staff pro premium priority answered 8 months ago

Hello,

The problem is related to ca-certificate. From Sept 30th 2021 Let's Encrypts previous root certificate DST Root CA X3 (and it's R3 intermediate) will expire. It has been replaced by their ISRG Root X1 certificate (and replacement R3 intermediate). Probably you need to update your ca-certificate. This article can help you solve this problem: https://docs.certifytheweb.com/docs/kb/kb-202109-letsencrypt/#clients-browsers-etc

Keep coding,

Adam From MDB


FREE CONSULTATION

Hire our experts to build a dedicated project. We'll analyze your business requirements, for free.

Status

Closed

Specification of the issue
  • User: Free
  • Premium support: No
  • Technology: MDB React
  • MDB Version: MDB5 1.3.0
  • Device: Amplify
  • Browser: No Browser
  • OS: Linux
  • Provided sample code: No
  • Provided link: Yes
Tags
pro