UoW MiCADO master uses a self-signed TLS certificate causing an NET::ERR_CERT_AUTHORITY_INVALID
summary
UoW MiCADO master uses a self-signed TLS certificate causing an NET::ERR_CERT_AUTHORITY_INVALID
in firefox and forcing as to use the --insecure
flag with curl to interact with the MiCADO API:
cert
NET::ERR_CERT_AUTHORITY_INVALID
Subject: micado-master: Self-signed certificate
Issuer: micado-master: Self-signed certificate
Expires on: 27 Jul 2031
Current date: 6 Sept 2021
PEM encoded chain:
-----BEGIN CERTIFICATE-----
MIIFVjCCAz6gAwIBAgIUK9+cNVclidc0jPnQS1onEONNqAswDQYJKoZIhvcNAQEL
BQAwUzEgMB4GA1UECgwXU2VsZi1zaWduZWQgY2VydGlmaWNhdGUxLzAtBgNVBAMM
Jm1pY2Fkby1tYXN0ZXI6IFNlbGYtc2lnbmVkIGNlcnRpZmljYXRlMB4XDTIxMDcy
OTExMDIyNFoXDTMxMDcyNzExMDIyNFowUzEgMB4GA1UECgwXU2VsZi1zaWduZWQg
Y2VydGlmaWNhdGUxLzAtBgNVBAMMJm1pY2Fkby1tYXN0ZXI6IFNlbGYtc2lnbmVk
IGNlcnRpZmljYXRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvpbR
h0KiJGeSD9hAQGH+KzJInnxjr6cI5GPMYfNgxDhuETuQVd3RgLTldyt9/ipli7sS
LHt5951hYmY7EQgHE90J/5eApSnVt5Nvtf1J6484yqmrKueBJZN+d18XCT24hy9F
vOi4HfrTvI5Mtx1ZnQojE7ZPLL0DxFYTRwrFhKBEos4CP+JyQCfQG0MF3CaSeD1/
NsUpP+S7Rvh5b1kOkz9ch+ovu2dlE9JporTZnXH6I7bRuUcjVvXdLApCBmOZuaLn
NiCUvYl5BFOpfokn4GHcFirjbFaVKnxtJmFXRVy1sndPk+AsBLXtr+bbds5nzfaB
dXDEEdSoRFQV6srOFrk9reFNRMjv3LQ0w+JHF4/J1vlQnGLe6rrJnIx6jUCXI0Ml
3RO0qPhPDF3gI4t2e6AmhfiNhyQvGtmX7/K0bEMqMP3Y3V+Ly91Dyn1A/AouA/w+
H05jIp5Vth3vNT5wZVGcU8FqawJ/d3Rfc4kyIPKlpiBNIA4ygModKBLG3Pb0T3w6
33p1ICOMwFHoXkmfx3SnwQroGTd3HQ03XWi2+1TpyeWBRFx90gUDygaRQq9U4hlI
6sVEVfUnYUzeD+dEEKaT0EYalncOfhe5KyIT9xBp+2w9kH6MEJIkjHJtPibHi2Z3
lzXpr4CKI7Sq+6MWGxiafIvsmjc5/GmlUJSDxTUCAwEAAaMiMCAwHgYDVR0RBBcw
FYcEoUofYIINbWljYWRvLW1hc3RlcjANBgkqhkiG9w0BAQsFAAOCAgEAdc8nojIX
2sgS9o7Wi9FYlNXTdVob3Bod6ZtFhH3EoTHSR1C/5r31OGnWdJgsHD+yAJ8Q14vE
Rcdd+2YMdyGu2WaOT4ETHOP6tofUzuCNgIpcKJOmwxjFXYsJhXQxSxUEChqf0nIY
mKie0Y3FbNfF7WpuHjDjgRqT/iZVyhLq8sayuOP1nEkM6NOggsqBSceGuq6NgN2n
9XGLEVspgk5DJjPfyiRzKNhttLp1HDN8hW2fMGIBZ1iADTBh1a1e0VMeWk8bQ9Ht
2R9cVDilhqwDAU4zQzapTGGO+0+1Pr2Ae7lnqnHNXmKOWgIybPH9Dn4Zm8Q43fnO
UCqNKtuwo5GAfDpNKS0L6n/NbDaoK9GSILtCC4c69ATfDDu3AjtPv/d4ivvSWJP3
zUMpF49OX/azmjaywnyvy+dSe01uwjxCkOkZFI0rpi5QkTPFZE9m5ZdQsEDu5ajV
41Ku5C8XjjAnK43XQpqramHSV83QKx16FBEIp/QnPQFWyJ+29XmgfsP7VkEaGWcw
jY9fqg2qj4fmpd6wF0EYdkaDMwY25a4ff3yJrEUADxSdVrmt6A6KYRkwxytc2L7/
Z9loNI9jJtqEQansjQtHUPVSPs1CbvSR6Pofh8xp+09LE0A0KOxPBen+IFI+hh8U
wjeqQoZlNLv3RfLYeTRTh21zsZTaR2EH5bM=
-----END CERTIFICATE-----
Definition of Done:
-
ask them to use LetsEncrypt like everyone else
hints
- more info on this server here: https://gitlab.rz.htw-berlin.de/snet-asclepios-demo/snet-asclepios-deployment/-/wikis/UoW-MiCADO-Master
Edited by Ilka Schulz