Certificate Expiry for Notary Server

[vigneshkaladharan]

{"level":"error","msg":"Trust not fully operational: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: x509: certificate has expired or is not yet valid: current time 2023-12-03T12:13:12Z is after 2023-04-22T13:09:33Z"","time":"2023-12-03T12:14:52Z"}

Getting this error when docker notary server is started in local from docker container.

[Spiegie]

you have to regenerate the test certificates
Just run the script /fixtures/regenerateTestingCerts.sh

[Samsanga]

@Spiegie, I have regenerated the certificates. But still no luck.

After regenerating the certs, I have run docker compose down and started it again using docker compose up -d

{"level":"error","msg":"Trust not fully operational: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: x509: certificate has expired or is not yet valid: current time 2024-12-05T08:41:56Z is after 2023-04-22T13:09:33Z"","time":"2024-12-05T08:41:56Z"}

[sanjiv-16]

@Samsanga is there any solution for this, am facing same issue

[omrisarig13]

For anyone facing this issue in the future, I had the same issue, and regenerating the certificates worked for me, but there were a couple of things I noticed while doing that:

• The script /fixtures/regenerateTestingCerts.sh must run from inside the fixtures directory (e.g., cd fixture; ./regenerateTestingCerts.sh), as it uses relative paths.
• After re-generating the certificates, I had to manually delete the used images, to force docker-compose to re-generate them, with the new certificates (i.e., docker-compose down; docker rmi notary-server:latest notary-signer:latest).