Tags
#tls
kubectl "x509: certificate signed by unknown authority": your kubeconfig doesn't trust this cluster
Fix kubectl "x509: certificate signed by unknown authority": get a fresh kubeconfig for a recreated cluster, compare the CA, and handle proxies that inspect TLS.
Intermediate · 3 min read
"Certificate has expired": check the dates, renew it, and find out why it didn't renew
Fix "certificate has expired" and NET::ERR_CERT_DATE_INVALID: check the dates with openssl, renew with Certbot, reload the server, and fix why renewal or clock failed.
Beginner · 4 min read
Certbot "failed to authenticate some domains": read the Type, then fix DNS, port 80 or the path
Fix Certbot "failed to authenticate some domains": read the error type, then fix DNS records, an IPv6 AAAA record, a closed port 80, the webroot, Cloudflare and CAA.
Intermediate · 5 min read
"SSL certificate problem: unable to get local issuer certificate": fix the chain, not the check
Fix "unable to get local issuer certificate" in curl, git, pip, npm and Docker: find the broken link with openssl, then fix the server chain or add the missing CA.
Intermediate · 4 min read