Invalid Certificate for Web Service

Hello,

For some reason I am getting an invalid cert error:

NET::ERR_CERT_AUTHORITY_INVALID

This is for the URL

https://reportitnode.onrender.com

This was working a few days ago.

Any help would be appreciated.

P.S This service is amazing :0)

Hi Craig,

Thanks for reaching out.

I’m not currently seeing any certificate issues with reportitnode.onrender.com. If you’re still seeing a problem, please could you share some more details, like browser/OS, when did this start, etc. Have you tried a hard refresh in the browser? Maybe the output of curl -Iv https://reportitnode.onrender.com/ would highlight any issues?

Thanks

Alan

Alan,

Seems to all be working now, classic :0)

Thanks,

Hi Alan,

I just started having a certificate issue today. The certificates were valid about an hour ago, but it started failing about 30 min ago (~5:30 pm MT).

I ran the curl command you mentioned and this is the output:

*   Trying 146.112.61.110...
* TCP_NODELAY set
* Connected to portal-api-hbzz.onrender.com (146.112.61.110) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/cert.pem
  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Hi Stan,

The IP in your curl doesn’t seem to be one of ours. It seems to be OpenDNS:

$ dig -x 146.112.61.110 +short
hit-malware.opendns.com.

Are you using OpenDNS? Are you still seeing this behaviour?

Thanks

Alan

Hi Alan,

I was not aware of this, but it turns out, our company is using OpenDNS. I’ll need to get with our IT staff and work it out with them.

Thanks for the quick response! :grinning: