Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question: How to fix such X509 error ? #1

Open
cmoulliard opened this issue Mar 11, 2022 · 2 comments
Open

Question: How to fix such X509 error ? #1

cmoulliard opened this issue Mar 11, 2022 · 2 comments

Comments

@cmoulliard
Copy link

Question

How can we fix such an error that I still got post CA updated ?

Log of the initContainer

Updating certificates in /etc/ssl/certs...                                                                                                                                                             1 added, 0 removed; done.                                                                                                                                                                               │
Running hooks in /etc/ca-certificates/update.d...                                                                                                                                                      

Error from Pod

 Warning  Failed     4s    kubelet            Failed to pull image "harbor.65.108.148.216.nip.io/toto/httpd:2.4.52-alpine": rpc error: code = Unknown desc = failed to pull and unpack image "harbor.6 │
│ 5.108.148.216.nip.io/toto/httpd:2.4.52-alpine": failed to resolve reference "harbor.65.108.148.216.nip.io/toto/httpd:2.4.52-alpine": failed to do request: Head "https://harbor.65.108.148.216.nip.io/v │
│ 2/toto/httpd/manifests/2.4.52-alpine": 
x509: certificate signed by unknown authority (possibly because of "x509: invalid signature: 
parent certificate cannot sign this kind of certificate" while trying to verify candidate authority certificate "harbor.65.108.148.216.nip.io")

I used this script to gen the X509 certificates and install your CA injector: https://gist.github.com/cmoulliard/355c50316804deaf4e65adcc74ee8324

@cmoulliard
Copy link
Author

@jorgemoralespou Have you been able to see my ticket ?

@jorgemoralespou
Copy link
Contributor

jorgemoralespou commented Mar 21, 2022

As I mentioned in slack, I do not support these packages. Feel free to fork and fix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants