-
Notifications
You must be signed in to change notification settings - Fork 7.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Generating x509_crt_bundle (IDFGH-5933) #7621
Comments
Hi @Typoception Thank you for the issue. The issue is because one of the certificates in the cacrt_all.pem file has been expired recently ( 30 sep ). That is causing the failure in build. |
@AdityaHPatwardhan how do i do that? I'm new to vscode. cant seem to find the option. |
@AdityaHPatwardhan found it. thanks. finally works. |
could you please tell me how to do this? I'm building on terminal on Linux |
@AdityaHPatwardhan Thank you a lot! @ghada-sellami in your sdkconfig file you can comment these lines : |
|
Hello guys I also thought the issue stems from the recently expired Let's Encrypt root certificate (DST Root CA X3), but removing it from Doing some debugging I found that the EC-ACC certificate (which has not yet expired) seem to be the culprit. Removing that certificate from I have not dug further so I don't know exactly what is wrong with that certificate. BTW: there are multiple certificates inside Thanks |
Hi guys the issue seems to be that the EC-ACC certificate is using a negative serial number... Thanks |
Attempt to fix 'gen_crt_bundle.py: Invalid certificate in /home/runner/work/lv_micropython/lv_micropython/esp-idf/components/mbedtls/esp_crt_bundle/cacrt_all.pem' error on build_idf43 test. This happens since the certificate expired. This fix is based on the suggested workaround espressif/esp-idf#7621 (comment)
Error: x509_crt_bundle not found. Due to a certificat expiration espressif/esp-idf#7621 (comment) PlatformIO tab (on the left), Project Tasks > esp32dev > Platform > Run Menuconfig Then: Component config > mbedTLS > Certificate Bundle->Enable trusted root certificate bundle Deactivate the option.
I build in ESP-IDF 4.2 powershell. How to do this? |
Try running |
i running idf.py menuconfig before running idf.py build but still failed |
Hi @DwangDNguyen , can you try adding |
Thanks |
For anyone else getting stuck on this, you need to disable the option in the UI menu if you're in VSCode, as the |
Fix is already available on Kindly let us know if you are still facing any issues. |
For people, who still have this problem: You can manualy delete EC-ACC certificate from
This solved my problem with building 'hello_world' example (I am using release/v4.4) |
@ttdever Thank you for being so specific. |
What worked for me was: |
Yes this issue still persists in the latest version, but following the directions above to disable the cert works to get builds working again. |
Hi @askdesigners, Can you please mention which branch and which commit id you are using, thanks. |
This issue still exists in 4.3.1. Brand new install. None of the above suggestions work. |
@rtheil Yes, the release
If that is not possible then as a temporary workaround you can do one of the following steps. |
@AdityaHPatwardhan TBH I'm not really sure as I just installed it all according to the tutorial related to the VSCode extension. |
@askdesigners No issues, I think you are using v4.3.1 as it is the latest release. Please refer to my earlier comment for possible solutions. |
Hi @rtheil
To remove the last error that you mentioned. If you are still facing some issue after this then as a last resort you can do following.
a)If you are not using I hope this helps, thanks |
Certificate bundle has expired/invalid certs, so disabled as per: See espressif/esp-idf#7621 This should be temporary once ESP-IDF is updated.
Why is this issue closed? It's still not fixed. |
I believe it's referenced here: UncleRus/esp-idf-lib#251 |
Certificate bundle has expired/invalid certs, so disabled as per espressif/esp-idf#7621 This should be temporary once ESP-IDF is updated. At present using ESP-IDF 4.3.1.
Hi. This issue keeps popping up. I'm no sure how to fix it. I've just installed VSCode and ESP-IDF extension. Tried the project examples (blink) and this appears.
Issue:
Generating x509_crt_bundle
FAILED: esp-idf/mbedtls/x509_crt_bundle
cmd.exe /C "cd /D C:\Users\yahsa\Desktop\NTU\FYP\ESP_Workspace\blink\build\esp-idf\mbedtls && C:\Users\yahsa\esp.espressif\python_env\idf4.3_py3.8_env\Scripts\python.exe C:/Users/yahsa/esp/esp-idf/components/mbedtls/esp_crt_bundle/gen_crt_bundle.py --input C:/Users/yahsa/esp/esp-idf/components/mbedtls/esp_crt_bundle/cacrt_all.pem -q"
gen_crt_bundle.py: Invalid certificate in C:/Users/yahsa/esp/esp-idf/components/mbedtls/esp_crt_bundle/cacrt_all.pem
Invalid certificate
ninja: build stopped: subcommand failed.
Anyone can guide me on how to solve this?
The text was updated successfully, but these errors were encountered: