search

i2group / analyze-deployment-tooling

Develop i2 Analyze configurations by using the configuration development environment. Review reference architectures for containerised deployments of i2 Analyze.
https://i2group.github.io/analyze-deployment-tooling/
Other
1 stars 1 forks source link

NET::ERR_CERT_AUTHORITY_INVALID #7

Closed stvdo closed 1 year ago

stvdo commented 1 year ago

Today my SSL certificates expired. I did the steps below but I didn't get it back to work again.

i2 Analyze: v4.4.2 i2 Analyze containers: v2.6.0

  1. Removed the dev-environment-secrets folder
  2. Created the create-dev-environment
  3. Deployed a clean config, deploy -c config-demo -t clean
  4. Deployed my config, deploy -c config-demo
  5. I added the CA certificate to Windows and Chrome
  6. I check the certificates in Windows and Chrome, it's added correctly with expiry date 13-11-24
  7. Tried it in incognito browser, Edge and FireFox but without success
  8. I cleared the cache in Chrome

I can't find that this is a known bug in the change log, https://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@github.com/i2group/analyze-containers/blob/v2.7.1/CHANGELOG.md#changelog.

Do you have any suggestions? I'll update to i2 Analyze containers 2.7.1.

stvdo commented 1 year ago

I updated i2 Analyze containers to version 2.7.1. But Still the same error, after I logged in into i2 Notebook.

image

Matt-Hadfield-i2 commented 1 year ago

Hi @sdorresteijn88 ,

In 2.7.1 we updated the mechanism for rotating the certificates, could you try the following steps from: https://i2group.github.io/analyze-containers/content/troubleshooting.html#error-msgremote-error-tls-bad-certificate

Recreate the secrets for your environment to generate new certificates.

  1. Run manage-environment -t renew-certificates to recreate certificates.
  2. Run deploy -c to redeploy with the new certificates.
  3. Reinstall the certificates in your operating system and browser.

Thanks, Matt

stvdo commented 1 year ago

Hi @Matt-Hadfield-i2

Thanks for your quick response!

I tried the steps you mentioned, but it didn't work.

I removed all the i2 certificates in Windows and Chrome. After that I installed the new certificate again.

When I install the certificate in Windows I receive also this popup. I clicked 'Yes' and got the message the it was installed successfully. image

After this I installed the certificate in Chrome and got also the message that it was installed successfully.

Matt-Hadfield-i2 commented 1 year ago

Hi @sdorresteijn88 , do you get the same error if you try and connect from Analyst's Notebook?

stvdo commented 1 year ago

Hi @Matt-Hadfield-i2

Than I get this error.

image

This is the popup when I click View. image

i2 Analyze seems to work fine though. E.g. the connectors are working in ANBP 9.4.1.

Matt-Hadfield-i2 commented 1 year ago

Hi @sdorresteijn88 ,

Can I check that you are installing the "dev-environment-secrets\generated-secrets\certificates**externalCA**" certificate and not the "dev-environment-secrets\generated-secrets\certificates\CA" one?

Thanks, Matt

stvdo commented 1 year ago

Hi @Matt-Hadfield-i2

That was indeed the problem! Thanks for your quick assistance!