codecov-action icon indicating copy to clipboard operation
codecov-action copied to clipboard

Published 20 hours ago • verified publisher icon codecov

[Bug] Error: certificate has expired

Open roniemartinez opened this issue 3 years ago • 16 comments

Error

Run codecov/[email protected]
  with:
  env:
    pythonLocation: /opt/hostedtoolcache/Python/3.7.13/x64
    LD_LIBRARY_PATH: /opt/hostedtoolcache/Python/3.7.13/x64/lib
==> linux OS detected
Error: certificate has expired
    at TLSSocket.onConnectSecure (_tls_wrap.js:150[2](https://github.com/roniemartinez/dude/runs/7417077505?check_suite_focus=true#step:12:2):[3](https://github.com/roniemartinez/dude/runs/7417077505?check_suite_focus=true#step:12:3)[4](https://github.com/roniemartinez/dude/runs/7417077505?check_suite_focus=true#step:12:4))
    at TLSSocket.emit (events.js:314:20)
    at TLSSocket._finishInit (_tls_wrap.js:93[7](https://github.com/roniemartinez/dude/runs/7417077505?check_suite_focus=true#step:12:8):[8](https://github.com/roniemartinez/dude/runs/7417077505?check_suite_focus=true#step:12:9))
    at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:7[11](https://github.com/roniemartinez/dude/runs/7417077505?check_suite_focus=true#step:12:12):12)

Actions

https://github.com/roniemartinez/browsers/runs/7417078453?check_suite_focus=true https://github.com/roniemartinez/dude/runs/7417077505?check_suite_focus=true

roniemartinez avatar Jul 19 '22 20:07 roniemartinez

FWIW -- this also suggests to me that the default of false for fail_ci_if_error might not work entirely as expected, because ours and others' workflows are failing on these errors.

danielmklein avatar Jul 19 '22 20:07 danielmklein

FYI, we saw the exact same issue and an update to codecov/codecov-action@v3 fixed it

edit : most likely just down to luck and timing

Ronan-ACN avatar Jul 19 '22 21:07 Ronan-ACN

My projects are also impacted by it. What's the difference between v2 and v3?

disconnect3d avatar Jul 19 '22 21:07 disconnect3d

I had this error when using v3. Reran my CI and now it's fixed again, so the issue seems to have just passed.

friedkeenan avatar Jul 19 '22 21:07 friedkeenan

I am now getting the error again.

friedkeenan avatar Jul 20 '22 18:07 friedkeenan

We're using codecov/codecov-action@v3 and seeing this as well. We also explicitly set fail_ci_if_error: false.

mafredri avatar Jul 20 '22 18:07 mafredri

We're using codecov/codecov-action@v3 and seeing this as well.

We (harfbuzz) also see this with @v3.

behdad avatar Jul 20 '22 18:07 behdad

It was working for a while after yesterday's outage, but appears to be broken again circa 1100 Pacific / 1800 UTC.

scouten-adobe avatar Jul 20 '22 18:07 scouten-adobe

We use v3.1.0. Happening with us as well - https://github.com/SpoonLabs/sorald/runs/7435308576?check_suite_focus=true#step:14:9.

algomaster99 avatar Jul 20 '22 18:07 algomaster99

Same here for v3: https://github.com/blockprotocol/blockprotocol/runs/7435383971?check_suite_focus=true#step:14:1

kachkaev avatar Jul 20 '22 18:07 kachkaev

Same issue as well for v3 codecov_err

ryanhill1 avatar Jul 20 '22 18:07 ryanhill1

notAfter=Jun 18 18:10:31 2022 GMT ... Looks like something was restored with an old cert.

$ openssl s_client -connect uploader.codecov.io:443 -showcerts
CONNECTED(00000005)
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1D4
verify return:1
depth=0 CN = uploader.codecov.io
verify error:num=10:certificate has expired
notAfter=Jun 18 18:10:31 2022 GMT
verify return:1
depth=0 CN = uploader.codecov.io
notAfter=Jun 18 18:10:31 2022 GMT
verify return:1
---
Certificate chain
 0 s:CN = uploader.codecov.io
   i:C = US, O = Google Trust Services LLC, CN = GTS CA 1D4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
 1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1D4
   i:C = US, O = Google Trust Services LLC, CN = GTS Root R1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = uploader.codecov.io

issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1D4

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4697 bytes and written 401 bytes
Verification error: certificate has expired
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 10 (certificate has expired)
---

bdraco avatar Jul 20 '22 18:07 bdraco

Issue seems to have resolved for me.

friedkeenan avatar Jul 20 '22 18:07 friedkeenan

Issue seems to have resolved for me.

Same, thanks a lot!

soosub avatar Jul 20 '22 18:07 soosub

~~Wow, this is really wobbly. Just failed for us again (1430 Pacific / 2130 UTC).~~

Sorry, false alarm. Was looking at the wrong browser tab. Current run appears to be succeeding.

scouten-adobe avatar Jul 20 '22 21:07 scouten-adobe

Doesn't seems to be fixed for us 🤔

guizmaii avatar Jul 21 '22 05:07 guizmaii