Unable to get SSL Certificate

[draper87]

Description
During setup with
curl -s https://raw.githubusercontent.com/markshust/docker-magento/master/lib/onelinesetup | bash -s -- magento.test 2.4.2
I got this notification:

Generating SSL certificate...
cat: can't open '/root/.local/share/mkcert/rootCA.pem': No such file or directory
Created a new local CA at "/root/.local/share/mkcert" 💥
The local CA is now installed in the system trust store! ⚡️

System password requested to install certificate authority on host...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Using the local CA at "/root/.local/share/mkcert" ✨

Created a new certificate valid for the following names 📜

• "magento.test"

The certificate is at "nginx.crt" and the key at "nginx.key" ✅

After checking with Chrome on Ubuntu 18.04 the SSL certificate looks invalid as shown here below

What should I do in order to solve this issue?
Steps To Reproduce

1. curl -s https://raw.githubusercontent.com/markshust/docker-magento/master/lib/onelinesetup | bash -s -- magento.test 2.4.2

Expected Result
A valid certificate

Actual Result
Invalid certificate

[nverhoye]

Hello,

Same issue here.

[markshust]

This appears to be a duplicate of #222

[Axel29]

Hi,

I've just set up an existing project with your docker for the first time and I also get an NET::ERR_CERT_AUTHORITY_INVALID error.

I tried running the following commands: bin/setup-ssl thesages.test and bin/setup-ssl-ca thesages.test, which didn't thrown any error, but still the SSL is invalid.

I'm using Ubuntu 21.10 and the latest version of your Docker environment.

EDIT: I used the setup-ssl-ca script from #222 (comment) and it worked! Do you know @markshust if it is safe to use this version of the script?

EDIT 2: Re running the script broke the SSL ^^" Now I get the following output:

The local CA is already installed in the system trust store! 👍

                                                               System password requested to install certificate authority on host...
Checking for libnss3-tools: install ok installed
Notice: Trust flag u is set automatically if the private key is present.
certutil: could not add certificate to token or database: SEC_ERROR_ADDING_CERT: Error adding certificate to database.

Thanks for your help.

---

[markshust]

That's odd, because the contents of that comment should be the exact same file as the root bin/setup-ssl-ca script at https://github.com/markshust/docker-magento/blob/master/compose/bin/setup-ssl-ca as I merged in the related PR.

I'm honestly not sure was I don't currently have an Ubuntu machine set up to test this all out.

[AngeloZou]

I'm using ubuntu 22.04, and I had the same problem.
#959