Unable to get local issuer certificate ISRG Root X1 errno 13, Permission denied

Help
,
1

Environment

CloudLinux

Problem/Question

I have the same problem with two nodes added to Netdata Cloud, both with CloudLinux. At first they were visible and connected but today they appears offline.

In error.log I see these messages:

2022-06-29 09:05:26: netdata ERROR : ACLK_Main : Cert Chain verify error:num=20:unable to get local issuer certificate:depth=2:/C=US/O=Internet Security Research Group/CN=ISRG Root X1 (errno 13, Permission denied)
2022-06-29 09:05:26: netdata ERROR : ACLK_Main : SSL_write Err: SSL_ERROR_SSL
2022-06-29 09:05:26: netdata ERROR : ACLK_Main : Couldn’t write HTTP request header into SSL connection (errno 22, Invalid argument)
2022-06-29 09:05:26: netdata ERROR : ACLK_Main : Couldn’t process request
2022-06-29 09:05:26: netdata ERROR : ACLK_Main : Error trying to contact env endpoint (errno 22, Invalid argument)
2022-06-29 09:05:26: netdata ERROR : ACLK_Main : Failed to Get ACLK environment

I already updated ca-certificates.

What I expected to happen

Get nodes monitored through Netdata Cloud.

2

Hi!

It looks like you are affected by the expiration of the Let’s Encrypt DST Root CA X3 Expiration. You mentioned that you’ve updated the ca-certificates package on your machines. Which version is there now?

3

Hello ralphm,

The version installed is the latest version:

ca-certificates-2021.2.50-72.el7_9.noarch

I tried to update it but this is the message I receive:

Package ca-certificates-2021.2.50-72.el7_9.noarch already installed and latest version
Nothing to do

Thank you.