Curl SSL error

Hi, Im getting following error with the docker template.

+ curl -fsSL --compressed https://XXXX/bin/coder-linux-amd64 -o coder
curl: (60) SSL: no alternative certificate subject name matches target host name 'XXXX'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...

+ curl -fsSL --compressed https://XXXX/bin/coder-linux-amd64 -o coder
curl: (60) SSL: no alternative certificate subject name matches target host name 'XXXX'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...

+ curl -fsSL --compressed https://XXXX/bin/coder-linux-amd64 -o coder
curl: (60) SSL: no alternative certificate subject name matches target host name 'XXXX'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...

+ curl -fsSL --compressed https://XXXX/bin/coder-linux-amd64 -o coder
curl: (60) SSL: no alternative certificate subject name matches target host name 'XXXX'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...

thy•7/19/23, 6:29 PM

What kind of SSL cert do you have on your coder control plane? Does it verify successfully in your browser?

lucaOP•7/19/23, 6:30 PM

Works in my browser. Using NGINX Proxy Man with CloudFlare for the Cert

thy•7/19/23, 6:53 PM

is --access-url--access-url set to the URL you use in the browser?

lucaOP•7/19/23, 7:15 PM

wdym

lucaOP•7/19/23, 7:16 PM

where?

thy•7/19/23, 7:21 PM

on the

coder server

coder server

thy•7/19/23, 7:21 PM

wherever you're running the control plane

Elio•7/19/23, 8:08 PM

I'm getting this same error when building an Ubuntu Docker image, issue just popped up today

Elio•7/19/23, 8:08 PM

Yours could just be a cert issue if this is your first time setting up and you are using a self-signed cert

thy•7/19/23, 8:16 PM

it's also possible the image doesn't have a cert trust store

Elio•7/19/23, 8:26 PM

My images def do, they were working fine yesterday. Today curl suddenly starting failing for everything in the build process of Ubuntu based images

lucaOP•7/19/23, 9:03 PM

can i just add --insecure to the curl cmd somehow?

Elio•7/19/23, 9:46 PM

If you have access to change it then yeah

thy•7/19/23, 10:17 PM

if curl doesn't work it's unlikely the agent would be able to connect

lucaOP•7/20/23, 9:04 AM

Fixed the first Problem. Caused by my Wildcard Cert for 2 Domains. I'm using now a Cert for the Subdomain only.
But Im getting now another error.

curl -#fL -o ~/.cache/code-server/code-server-4.11.0-linux-amd64.tar.gz.incomplete -C - https://github.com/coder/code-server/releases/download/v4.11.0/code-server-4.11.0-linux-amd64.tar.gz
curl: (60) SSL: no alternative certificate subject name matches target host name 'objects.githubusercontent.com'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

curl -#fL -o ~/.cache/code-server/code-server-4.11.0-linux-amd64.tar.gz.incomplete -C - https://github.com/coder/code-server/releases/download/v4.11.0/code-server-4.11.0-linux-amd64.tar.gz
curl: (60) SSL: no alternative certificate subject name matches target host name 'objects.githubusercontent.com'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Elio•7/20/23, 2:37 PM

Yup this was the same thing I ran into

Elio•7/20/23, 2:38 PM

I had to rebuild my image to fix it

thy•7/20/23, 4:34 PM

are you able to share your image?

Elio•7/20/23, 7:33 PM

It was unrelated to coder

Elio•7/20/23, 7:34 PM

Just an unbuntu 22 image with some certificates installed on top

Phorcys•7/31/23, 10:29 AM

nevermind, I spoke too fast, could you share your image ? (@luca)

curl -#fL -o ~/.cache/code-server/code-server-4.11.0-linux-amd64.tar.gz.incomplete -C - https://github.com/coder/code-server/releases/download/v4.11.0/code-server-4.11.0-linux-amd64.tar.gz curl: (60) SSL: no alternative certificate subject name matches target host name 'objects.githubusercontent.com' More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above.

Curl SSL error

Similar Threads

Similar Threads

Similar Threads