certificate verify failed

[ibraheemalogaidi]

Hello ,

Many thanks for the outstanding work.

I am trying to create a cluster using hetzner-k3s create --config hetzner-cluster.yaml but getting the following error:

Unhandled exception: SSL_connect: error:0A000086:SSL routines::certificate verify failed (OpenSSL::SSL::Error)
  from /usr/lib/crystal/core/gc/boehm.cr:147:5 in 'new:context:sync_close:hostname'
  from /usr/lib/crystal/core/http/client.cr:794:5 in 'io'
  from /usr/lib/crystal/core/http/client.cr:670:19 in 'exec_internal_single'
  from /usr/lib/crystal/core/http/client.cr:584:18 in 'exec'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/lib/crest/src/crest/request.cr:203:23 in 'execute'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/lib/crest/src/crest.cr:47:3 in 'available_releases'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/src/configuration/settings/k3s_version.cr:9:15 in 'validate'
  from /usr/lib/crystal/core/gc/boehm.cr:147:5 in 'parse_and_run'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/src/hetzner-k3s.cr:96:1 in '__crystal_main'
  from /usr/lib/crystal/core/crystal/main.cr:129:5 in 'main'
  from src/env/__libc_start_main.c:95:2 in 'libc_start_main_stage2'

also I get certificate error when doing hetzner-k3s releases

Unhandled exception: SSL_connect: error:0A000086:SSL routines::certificate verify failed (OpenSSL::SSL::Error)
  from /usr/lib/crystal/core/gc/boehm.cr:147:5 in 'new:context:sync_close:hostname'
  from /usr/lib/crystal/core/http/client.cr:794:5 in 'io'
  from /usr/lib/crystal/core/http/client.cr:670:19 in 'exec_internal_single'
  from /usr/lib/crystal/core/http/client.cr:584:18 in 'exec'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/lib/crest/src/crest/request.cr:203:23 in 'execute'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/lib/crest/src/crest.cr:47:3 in 'available_releases'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/src/hetzner-k3s.cr:75:9 in 'parse_and_run'
  from /home/runner/work/hetzner-k3s/hetzner-k3s/src/hetzner-k3s.cr:96:1 in '__crystal_main'
  from /usr/lib/crystal/core/crystal/main.cr:129:5 in 'main'
  from src/env/__libc_start_main.c:95:2 in 'libc_start_main_stage2'

Many thanks

[vitobotta]

Hi, which OS are you running the tool on?

[ibraheemalogaidi]

Hi , AlmaLinux 8.10

[psavva]

HI @ibraheemalogaidi I can confirm that is not related to the tool itself.
I have installed the tool now, and also done hetzner-k3s releases and works ok.

The issue you're facing will be related to yoru specific distro/installation/pc

I suggest you try from another workstation, or figure out why certificates are not trusted on your pc.

[vitobotta]

Thanks @psavva. This is the first report of this issue so I agree that it's likely an issue somehow related to the distro. @ibraheemalogaidi are you still having the same problem or have you succeeded with another distro?