question

Ulrich avatar image
Ulrich asked

request to https://vrmapi.victronenergy.com/v2/auth/login failed, reason: certificate has expired

I could not login to VRMAPI.

If i click on "LOGIN" my Dockermachine victronenergy/venus-docker-server says:

request to https://vrmapi.victronenergy.com/v2/auth/login failed, reason: certificate has expired

Wich certificate? How could i generate a new one?


[info] [vrm] Logging In 

(node:1) UnhandledPromiseRejectionWarning: FetchError: request to https://vrmapi.victronenergy.com/v2/auth/login failed, reason: certificate has expired

    at ClientRequest.<anonymous> (/usr/local/lib/node_modules/venus-docker-grafana-server/node_modules/node-fetch/lib/index.js:1455:11)

    at emitOne (events.js:116:13)

    at ClientRequest.emit (events.js:211:7)

    at TLSSocket.socketErrorListener (_http_client.js:401:9)

    at emitOne (events.js:116:13)

    at TLSSocket.emit (events.js:211:7)

    at emitErrorNT (internal/streams/destroy.js:73:8)

    at _combinedTickCallback (internal/process/next_tick.js:139:11)

    at process._tickCallback (internal/process/next_tick.js:181:9)

(node:1) UnhandledPromiseRejectionWarning: Unhandled promise rejection. This error originated either by throwing inside of an async function without a catch block, or by rejecting a promise which was not handled with .catch(). (rejection id: 1)

(node:1) [DEP0018] DeprecationWarning: Unhandled promise rejections are deprecated. In the future, promise rejections that are not handled will terminate the Node.js process with a non-zero exit code.
VRM
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

6 Answers
Ulrich avatar image
Ulrich answered ·

Yes, it is fixed. They have installed a new certificate.

2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

Ulrich avatar image
Ulrich answered ·

Did you (victronenergy) changed the minimum TLS Version of the VRMAPI Server?

On the docker machine i found wget. Look here:

# wget https://vrmapi.victronenergy.com
--2021-10-04 14:09:57--  https://vrmapi.victronenergy.com/
Resolving vrmapi.victronenergy.com (vrmapi.victronenergy.com)... 3.127.228.28
Connecting to vrmapi.victronenergy.com (vrmapi.victronenergy.com)|3.127.228.28|:443... connected.
ERROR: The certificate of 'vrmapi.victronenergy.com' is not trusted.
ERROR: The certificate of 'vrmapi.victronenergy.com' has expired.
# wget --version
GNU Wget 1.18 built on linux-gnu.

openssl has Version 1.1.0l

It should support TLS 1.2....

Please help.

2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

Ulrich avatar image
Ulrich answered ·

Ahhhh.

Look here: (ssllabs.com)


1633358794478.png

One of your certificates has expired. My System has stopped at 2021-10-01 2:35 ...

(https://www.zoomsoft.de/grafana/d/zsbw/banu-womo?orgId=1&refresh=10s&from=now-7d&to=now)



1633358794478.png (75.0 KiB)
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

Ulrich avatar image
Ulrich answered ·

https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/


2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

Ulrich avatar image
Ulrich answered ·

Moved to: https://github.com/victronenergy/venus-docker-grafana/issues/18

2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

pau1phi11ips avatar image
pau1phi11ips answered ·

Strange, the domain looks good here: https://verify-letsencryptr3.dnsimple.tools/verify?host=vrmapi.victronenergy.com

2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.