Komodo can't validate valid SSL certs any more

th3coop commented 2 years ago

Short Summary

We're getting SSL cert warnings in the logs and most, but not all (ie. you're still able to login to the platform apparently), HTTPS calls are failing.

The most obvious breakage is the Komodo Packages Commando scope is completely broken. (See logs below)

Steps to Reproduce

Open commando and open the Packages scope then look at your Komodo logs More details: https://github.com/Komodo/KomodoEdit/issues/3944

Expected results

It works

Actual results

It does not work

Platform Information

It's unclear to me if this is Windows only. I don't have a Mac or Linux machine to check.

Additional Information

Logs

Traceback from ERROR in 'commando-scope-packages' logger:
    Logger.prototype.error@chrome://komodo/content/sdk/logging.js:411:27
    this._getAvailablePackagesByKind/<@chrome://scope-packages/content/packages.js:440:17
    this.request/req.onreadystatechange@chrome://komodo/content/sdk/ajax.js:81:17

[2021-11-29 11:17:46,006] [ERROR] console-logger: community.komodoide.com:443 uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.

(Error code: sec_error_expired_issuer_certificate)
 (0) in :0
Traceback (most recent call last):
  File "", line 0, in 

[2021-11-29 11:17:46,006] [ERROR] commando-scope-packages: Unable to retrieve package listing for skins
Traceback from ERROR in 'commando-scope-packages' logger:
    Logger.prototype.error@chrome://komodo/content/sdk/logging.js:411:27
    this._getAvailablePackagesByKind/<@chrome://scope-packages/content/packages.js:440:17
    this.request/req.onreadystatechange@chrome://komodo/content/sdk/ajax.js:81:17

[2021-11-29 11:17:46,006] [ERROR] console-logger: community.komodoide.com:443 uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.

(Error code: sec_error_expired_issuer_certificate)
 (0) in :0
Traceback (most recent call last):
  File "", line 0, in 

[2021-11-29 11:17:46,006] [ERROR] commando-scope-packages: Unable to retrieve package listing for macros
Traceback from ERROR in 'commando-scope-packages' logger:
    Logger.prototype.error@chrome://komodo/content/sdk/logging.js:411:27
    this._getAvailablePackagesByKind/<@chrome://scope-packages/content/packages.js:440:17
    this.request/req.onreadystatechange@chrome://komodo/content/sdk/ajax.js:81:17

[2021-11-29 11:17:46,015] [ERROR] console-logger: community.komodoide.com:443 uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.

(Error code: sec_error_expired_issuer_certificate)
 (0) in :0
Traceback (most recent call last):
  File "", line 0, in 

[2021-11-29 11:17:46,015] [ERROR] commando-scope-packages: Unable to retrieve package listing for schemes
Traceback from ERROR in 'commando-scope-packages' logger:
    Logger.prototype.error@chrome://komodo/content/sdk/logging.js:411:27
    this._getAvailablePackagesByKind/<@chrome://scope-packages/content/packages.js:440:17
    this.request/req.onreadystatechange@chrome://komodo/content/sdk/ajax.js:81:17

[2021-11-29 11:17:46,015] [ERROR] console-logger: community.komodoide.com:443 uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.

(Error code: sec_error_expired_issuer_certificate)
 (0) in :0
Traceback (most recent call last):
  File "", line 0, in 

[2021-11-29 11:17:46,015] [ERROR] commando-scope-packages: Unable to retrieve package listing for toolbox
Traceback from ERROR in 'commando-scope-packages' logger:
    Logger.prototype.error@chrome://komodo/content/sdk/logging.js:411:27
    this._getAvailablePackagesByKind/<@chrome://scope-packages/content/packages.js:440:17
    this.request/req.onreadystatechange@chrome://komodo/content/sdk/ajax.js:81:17

[2021-11-29 11:17:46,015] [ERROR] console-logger: community.komodoide.com:443 uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.

(Error code: sec_error_expired_issuer_certificate)
 (0) in :0
Traceback (most recent call last):
  File "", line 0, in 

[2021-11-29 11:17:46,015] [ERROR] commando-scope-packages: Unable to retrieve package listing for languages
Traceback from ERROR in 'commando-scope-packages' logger:
    Logger.prototype.error@chrome://komodo/content/sdk/logging.js:411:27
    this._getAvailablePackagesByKind/<@chrome://scope-packages/content/packages.js:440:17
    this.request/req.onreadystatechange@chrome://komodo/content/sdk/ajax.js:81:17

[2021-11-29 11:17:46,213] [ERROR] console-logger: community.komodoide.com:443 uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.

(Error code: sec_error_expired_issuer_certificate)
 (0) in :0
Traceback (most recent call last):
  File "", line 0, in 

[2021-11-29 11:17:46,213] [ERROR] commando-scope-packages: Unable to retrieve package listing for keybinds
Traceback from ERROR in 'commando-scope-packages' logger:
    Logger.prototype.error@chrome://komodo/content/sdk/logging.js:411:27
    this._getAvailablePackagesByKind/<@chrome://scope-packages/content/packages.js:440:17
    this.request/req.onreadystatechange@chrome://komodo/content/sdk/ajax.js:81:17

Soulmate6060 commented 2 years ago

Good

th3coop commented 2 years ago

Workaround for this issue (Installing new root SSL cert from Let's Encrypt) can be found here: https://community.komodoide.com/t/2021-11-24-1545-323-error-console-logger-community-komodoide-com-443-uses-an-invalid-security-certificate/5731/5?u=careyh

ghost commented 2 years ago

Sorry, I tried but it didn.t work for me.

Komodo / KomodoEdit