-
-
Notifications
You must be signed in to change notification settings - Fork 286
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Certificate Expired Error #596
Comments
MQTT Explorer: 0.3.5 |
Nice to see I'm not alone, spend lot of time on my config thinking of an issue on docker instance with certificate until I see all is fine except on MQTT Explorer Side. Not sure what changed and why now it does not work either.
|
Mine shows almost the same dates: |
Just saw this: |
Well, no, my certificate chain is going to the ISRG root cert, so that's not the case for me :-( |
Same issue here. I suspect that the MQTT Explorer client uses an internal cert store, rather than Windows wide certs. We had similar issues with a piece of hardware that we make, and in this case, because we also had DST Root CA X3 which had expired, this had to be removed. If the Client does use some internal cert handling, updating from here should fix it: https://curl.se/ca/cacert.pem |
Seems there is a workaround as this is a problem in the electron library that MQTT Explorer uses. The workaround is to create the certificate again, but tying it to a specific certificate chain using the e.g. I tried that and it solved the problem for me. |
Same issue. Just want upvote. |
the same issue |
Same problem here! |
That might be relevant for the problem that we have. I use 0.3.5
https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ |
This quick workaround worked for me: |
@jceloria how did you apply the workaround? |
I read and comprehended the content in provided link and then took the suggested action? I'm not sure what you're asking me to provide to you. |
Thanks - the content suggests a change to the certificate on the server, which mine already points to ISGRoot. So I was curious if there was something else you did. The problem seems to be with MQTT Explorer, since other programs such as MQTTx don't have an issue connecting via SSL to a server issued cert. Anyway, thanks for your response.
On Monday, February 7, 2022, 05:06:23 PM PST, John Celoria ***@***.***> wrote:
I read and comprehended the content in provided link and then took the suggested action? I'm not sure what you're asking me to provide to you.
—
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications on the go with GitHub Mobile for iOS or Android.
You are receiving this because you commented.Message ID: ***@***.***>
|
Right, its a workaround and not a fix. |
You can download the root certificate from here and add it your connection options via:
Don't forget to save the configuration after testing if it works correctly. Until the application is updated to a version of Electron where this was patched or the CA gets baked into the code with an hacky workaround, this the only way to fix the problem. |
Thanks marinofra. This worked for me, I can now turn cert validation on again and successfully connect to the affected servers. |
@thomasnordquist wouldn't this issue deserve at least a bump of beta version with new electron to fix the cert issue? |
+1 |
Still facing the same issue with version 0.4.0-beta1. Is there any fix planned to use the certificate store of the underlying OS? |
Just in case someone is expecting help from the Dev: he's not connecting since very long, and as far as we can tell the project is on hold at best. |
Thx @ilgrank for the info. Sad, because I liked the tool but then I will give MQTTX a try. |
Electron is upgraded to 29 now, hopefully that will fix it. Im moving slowly to try to break things. I'll try to get a new beta built |
I updated the LetsEncrypt certificates on my server, now validate certificate no longer works and I get a certificate expired error
The text was updated successfully, but these errors were encountered: