Skip to content

Rebuild image to update ca-certificates #65

@aebm

Description

@aebm

Hi,

This images has an old ca-certificates package (1). So when using a blackbox-exporter image I got (2) . If i rebuild from scratch the image the ca-certificates get update to 20230311+deb12u1 and then the blackbox exporter can verify the certificate when it connect.

If you want more details you can reproduce the problem if checking agains a certificate that uses as root CA Sectigo Public Server Authentication Root R46.

Cheers

(1)

sudo docker run --rm -ti --entrypoint sh prom/blackbox-exporter:master 
/ # ls -l /etc/ssl/certs/ca-certificates.crt 
-rw-r--r--    1 root     root        213777 Dec 15  2023 /etc/ssl/certs/ca-certificates.crt

(2)

tls: failed to verify certificate: x509: certificate signed by unknown authority

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions