-
Notifications
You must be signed in to change notification settings - Fork 40
Open
Description
Hi,
This images has an old ca-certificates package (1). So when using a blackbox-exporter image I got (2) . If i rebuild from scratch the image the ca-certificates get update to 20230311+deb12u1 and then the blackbox exporter can verify the certificate when it connect.
If you want more details you can reproduce the problem if checking agains a certificate that uses as root CA Sectigo Public Server Authentication Root R46.
Cheers
(1)
sudo docker run --rm -ti --entrypoint sh prom/blackbox-exporter:master
/ # ls -l /etc/ssl/certs/ca-certificates.crt
-rw-r--r-- 1 root root 213777 Dec 15 2023 /etc/ssl/certs/ca-certificates.crt
(2)
tls: failed to verify certificate: x509: certificate signed by unknown authority
tpath, oboudet-beetween and ryan-grenz-evelyn
Metadata
Metadata
Assignees
Labels
No labels