Docker registry certificate expired

[shepeliev]

Can't do docker login gitlab.linphone.org:4567/bc/public/linphone-sdk as certificate expired.

Login did not succeed, error: Error response from daemon: Get "https://gitlab.linphone.org:4567/v2/": x509: certificate has expired or is not yet valid: current time 2023-02-15T12:56:35Z is after 2023-02-12T23:59:59Z

[Viish]

Hi,

Try again, we have renewed the certificate yesterday.

[shepeliev]

Looks like you have renewed at gitlab.linphone.org:443, but 'gitlab.linphone.org:4567` still hosts outdated certificate 😀

alex@mbp-15 ~/s/linphone-sdk (4.5.26) [1]> echo | openssl s_client -showcerts -servername gitlab.linphone.org -connect gitlab.linphone.org:4567 2>/dev/null | openssl x509 -inform pem -noout -text

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ec:9a:fa:9a:4b:45:5b:e0:46:79:ac:11:a5:39:82:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
        Validity
            Not Before: Feb 12 00:00:00 2022 GMT
            Not After : Feb 12 23:59:59 2023 GMT
        Subject: CN=gitlab.linphone.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:46:13:86:5f:14:81:67:98:99:34:09:cc:fc:
                    42:a3:eb:5d:8d:16:d5:ef:a1:a5:a0:a1:d3:62:38:
                    68:c3:c0:d8:4f:d7:a7:8b:fc:65:d1:95:98:73:b5:
                    06:3a:94:f9:e9:58:6d:ac:78:70:b2:81:b2:7b:bf:
                    71:46:78:78:12:6c:e3:3a:7b:a5:a3:29:71:4c:e5:
                    ac:b1:5d:4a:37:8b:3b:15:3d:fa:3a:fd:27:5f:4f:
                    a9:60:20:1f:e9:a9:94:b7:85:bf:25:69:e9:92:8d:
                    fa:46:df:e6:d5:d4:29:c8:38:85:b7:06:e1:20:15:
                    0a:27:c7:8d:87:4d:33:25:6f:4e:47:6c:72:be:41:
                    cd:f3:e7:19:1f:a1:95:1c:af:4f:a3:fa:67:a6:05:
                    32:d9:0b:53:8d:d7:33:e1:9d:3f:e4:5c:0f:17:c6:
                    67:03:7b:8d:09:45:6d:d0:eb:43:43:50:ce:66:48:
                    6f:26:4a:56:12:e6:b4:17:bf:15:82:df:7e:f6:48:
                    bb:54:3f:53:64:98:f2:77:16:a5:b0:8e:36:80:35:
                    9b:81:20:c3:e5:71:c6:30:87:98:18:2a:5c:45:30:
                    ff:59:18:09:2c:1d:c2:79:d7:77:95:dc:44:8f:32:
                    64:84:86:a3:6d:ba:47:06:a4:a0:c0:76:21:80:ac:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA

            X509v3 Subject Key Identifier:
                52:14:A0:5A:F8:DD:4A:79:A0:85:BD:53:39:0D:85:3F:60:3F:65:92
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.6449.1.2.2.26
                  CPS: https://cps.usertrust.com
                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl

            Authority Information Access:
                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
                OCSP - URI:http://ocsp.usertrust.com

            X509v3 Subject Alternative Name:
                DNS:gitlab.linphone.org, DNS:www.gitlab.linphone.org
            1.3.6.1.4.1.11129.2.4.2:
                ...k.i.v.....|.....=..>.j.g)]...$...4.......~.........G0E. en..?<.6.fx.x.8}....b.n......E...!..c*.).7.....*..M9..]..8..N..:.
..,....._.N..1...P.w..>..>..52.W(..k......k..i.w}m..n...~.........H0F.!....P.s..s)....OgE.2.o.30.=.......!..U-(&`.Bm.0....[Nv.$0...R8.]SG..
    Signature Algorithm: sha256WithRSAEncryption
         80:d8:30:3f:30:4d:85:e9:7f:de:dd:71:ca:1e:53:4f:e3:30:
         b7:58:03:f1:5a:19:3a:2e:d4:59:d6:ca:56:9a:6e:0b:d7:b2:
         47:9a:c5:d1:75:fd:b2:62:a6:69:b9:12:e5:1c:59:cb:75:4d:
         86:10:a6:4b:c1:c8:08:7c:e3:57:5f:c4:26:a4:cb:56:ce:a4:
         5e:a2:8c:53:6c:c2:f3:74:2f:88:ff:a8:0c:5f:96:b9:ec:ae:
         2a:92:88:ef:eb:69:b3:c7:6c:8d:d1:9a:f7:4f:bd:8e:4b:8f:
         8d:cb:20:2a:67:55:dd:83:a8:ac:e5:d3:a7:84:e0:b1:1e:58:
         2e:05:a9:6e:6f:37:1b:67:c4:25:3c:ae:1a:9f:ef:f6:e2:be:
         bd:7b:f0:80:80:32:cd:5c:6c:45:b2:57:26:44:c8:45:16:85:
         3e:92:7b:65:1d:2c:40:29:2c:8d:fd:60:ef:fc:70:96:18:b8:
         88:74:69:e6:2f:a4:8f:93:3a:58:af:7f:c6:0f:30:56:e3:6a:
         b5:62:35:13:81:61:4f:ec:89:4a:e2:90:ce:6f:3e:05:d9:34:
         4c:f2:11:36:4c:e8:f0:7c:92:c5:e2:38:5c:f7:d4:02:55:4c:
         b6:f4:92:da:6b:02:0c:8b:5c:50:de:4f:b7:7a:a3:d9:3a:08:
         7f:8a:a5:c7