zodern / meteor-up

Production Quality Meteor Deployment to Anywhere
http://meteor-up.com/
MIT License
1.27k stars 281 forks source link

mup deploy - certificate has expired #1271

Closed TLMcNulty closed 3 years ago

TLMcNulty commented 3 years ago

Mup version (mup --version): 1.5.4

Mup config

{
  "servers": {
    "one": {
      "host": "1.2.3.4",
      "username": "user",
      "password": "password"
    }
  },
  "app": {
    "name": "my-app",
    "path": "../../.",
    "docker": {
      "image": "abernix/meteord:node-8-base",
      "stopAppDuringPrepareBundle": true,
      "imagePort": 3000
    },
    "servers": {
      "one": {}
    },
    "buildOptions": {
      "serverOnly": true,
      "buildLocation": "/tmp/mup-meteor-07bae19f-e9ab-4392-ad65-4fe43bb7c580",
      "cleanBuildLocation": true
    },
    "env": {
      "ROOT_URL": "https://subdomain.host.com",
      "MONGO_URL": "mongodb://user:pass@subdomain.subdomain.host.com:27017/:27017,fl-sleeper-shard-00-01.mxuvf.mongodb.net:27017,fl-sleeper-shard-00-02.mxuvf.mongodb.net/myFirstDatabase?ssl=true&replicaSet=atlas-p8idod-shard-0&authSource=admin&retryWrites=true&w=majority",
      "VIRTUAL_HOST": "subdomain.host.com",
      "HTTPS_METHOD": "noredirect",
      "LETSENCRYPT_HOST": "subdomain.host.com",
      "LETSENCRYPT_EMAIL": "email@domain.com",
      "VIRTUAL_PORT": 3000,
      "HTTP_FORWARDED_COUNT": 1
    },
    "type": "meteor"
  },
  "proxy": {
    "domains": "subdomain.host.com",
    "ssl": {
      "letsEncryptEmail": "email@domain.com"
    }
  }
}
✓ Config is valid

Output of command

$ mup deploy --verbose
Cleaning Up Previous Builds
Building App Bundle Locally
=> Errors while initializing project:                                       

While downloading accounts-base@1.4.2...:
error: certificate has expired

While downloading alanning:roles@1.2.16...:
error: certificate has expired

I was wondering if this was related to the ISRG expiration as this has not happened before - https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

I tried removing this certificate from my client's store, but best I can tell this shouldn't be relevant as I'm using OpenSSL 1.1.1f which should handle this automatically.

I saw mup v1.5.5 released, hoped maybe it included fixes so I tried updating.

npm i -g mup
...
+ mup@1.5.5
added 113 packages from 69 contributors in 13.742s

mup 1.5.5 is shown in package.json but asking mup itself returns 1.5.4

$ mup -v
1.5.4

Any help or insight would be appreciated.

AndyatFocallocal commented 3 years ago

+1

zodern commented 3 years ago

The error is happening during meteor build. Meteor updated the docs today on how to work around it: https://docs.meteor.com/expired-certificate.html