Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Deployment to HTTPS endpoint fails with SELF_SIGNED_CERT_IN_CHAIN, even though certificate is trusted by OS

See original GitHub issue

Describe the Bug

The app does not pick up custom root certificates that have been added to the OS trust store. When trying to deploy to a server with a self signed cert -> self imported self signed CA cert, the deployment fails and an error is logged:

{"code":"SELF_SIGNED_CERT_IN_CHAIN","deploymentName":"test","errno":"SELF_SIGNED_CERT_IN_CHAIN","message":"request to https://localhost:8443/engine-rest/deployment/create failed, reason: self signed certificate in certificate chain","type":"system"} [ deploy-error ]

Steps to Reproduce

Prerequisite:

Setup your environment, generate a CA certificate, generate a server certificate, import the CA certificate in your OS trust store, start a test server with the server certificate. Cf. this project that does the stuff on Arch Linux)

Reproduce bug:

In the App, create a diagram.
Press “Deploy Current Diagram”.
Fill in the “Name” - Test.
Fill in the “URL” - https://localhost:8443/engine-rest/deployment/create.
Press “Deploy”.

Additional information:

Apache Tomcat uses a certificate issued by a certification authority.
Deploy via HTTP works good.
Camunda APPs (e.g. admin, coсkpit, tasklist) works good via HTTPS (Сertificate is valid).

Expected Behavior

Diagram deployed via HTTPS.

Environment

OS: [CentOS 7.6, Windows 10]
Camunda Modeler Version: [3.1.2]
Apache Tomcat Version: [9.0.19]
Camunda Community Platform: [7.11.0]

Issue Analytics

State:
Created 4 years ago
Comments:18 (11 by maintainers)

Top GitHub Comments

1reaction

nikkucommented, Jul 24, 2019

After spending some time on the issue I can verify that this is a BUG.

It appears that the app does not pick up the certificates in the OS trust store.

This is an issue we got to work around somehow, as it seems to be broken upstream in Electron, cf. https://github.com/electron/electron/issues/11741 and https://github.com/electron/electron/issues/10257.

0reactions

djhuertasgcommented, Dec 28, 2021

I have a related issue. I’m getting in Camunda Modeler 4.9 the following error: “Should point to a running Camunda Platform REST API.” As far as I know the problem is caused by the self signed certificated that is not accepted as valid by Chrome.