Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

No longer works due to api.npmjs.org certificate issue

See original GitHub issue

https://npmcharts.com/ shows only a blank screen and the following error can be found in the console:

The SSL certificate used to load resources from https://api.npmjs.org has been distrusted. See https://g.co/chrome/symantecpkicerts for more information.

Certifcate error: NET::ERR_CERT_SYMANTEC_LEGACY, related: https://knowledge.digicert.com/alerts/ALERT2566.html

Issue Analytics

State:
Created 5 years ago
Comments:12 (12 by maintainers)

Top GitHub Comments

1reaction

Borewitcommented, Nov 18, 2018

Could I confirm that visiting npm’s API directly fails? https://api.npmjs.org/downloads/range/2017-11-17:2018-11-17/react-apollo,react-relay

It does fail indeed. I did send an email to npmjs.com (I assumed they own npmjs.org, are they?) btw at the same time I created this issue.

Does visiting npmchart’s proxy also fail? https://npmcharts.com/api/downloads/range/2017-11-17:2018-11-17/react-apollo,react-relay

No issue here.

Are you seeing this on your desktop chrome or mobile chrome? If you don’t mind, what ISP or phone service provider are you with? I suspect that somehow different regions are somehow being served bad (old?) certs through npm api’s network

I experience issues on Chrome, tested on Windows and Linux, different machines.

On Chrome/iphone it works fine.

Would you mind running this from the device where it’s currently breaking?
traceroute api.npmjs.org

 1  fritz.box (192.168.12.1)  1.336 ms  1.710 ms  1.908 ms
 2  lo0.dr13.d12.xs4all.net (194.109.5.212)  38.616 ms  38.553 ms  38.481 ms
 3  0.ae23.xr3.3d12.xs4all.net (194.109.7.53)  38.319 ms 0.ae23.xr4.1d12.xs4all.net (194.109.7.17)  36.728 ms  38.150 ms
 4  0.et-1-1-0.xr1.tc2.xs4all.net (194.109.5.7)  38.080 ms 0.et-7-1-0.xr1.tc2.xs4all.net (194.109.5.5)  38.015 ms 0.et-1-1-0.xr1.sara.xs4all.net (194.109.5.1)  37.931 ms
 5  ams-ix.as13335.net (80.249.211.140)  37.897 ms  37.838 ms  37.761 ms
 6  104.17.185.17 (104.17.185.17)  37.661 ms  7.404 ms  8.269 ms

May give us more insight as to where the problematic cert is coming from 🙏

Certificate chain:

Subject: api.npmjs.org
Issuer: RapidSSL SHA256 CA
Expires on: 23 nov. 2019
Current date: 18 nov. 2018

PEM encoded chain:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

You can validate the issue using this site: https://www.websecurity.symantec.com/support/ssl-checker

0reactions

Borewitcommented, Nov 22, 2018

Yeah, just keep it.

Top Results From Across the Web

How to fix SSL certificate error when running Npm on Windows?

So the solution is explicitly set root certificate for https://registry.npmjs.org . We can use openssl to make sure that the reason bellow is ......

ERR! self signed certificate in certificate chain #7519 - GitHub

I am brand new to Node and NPM. I downloaded it today and installed it. (I am trying to get Aurelia up and...

Understanding Self-Signed Certificate in Chain Issues on ...

It means that the certificate attached to the package is a way to be sure that the package was not modified from the...

Common errors | npm Docs

Possible temporary npm registry glitch, or corrupted local server cache. Run npm cache clean and/or try again later. · This can be caused...

npm install fails with SELF_SIGNED_CERT_IN_CHAIN

Please find few environment related details below and let me know if you require more information. Environment details: Node.js version: 14.16.1. NPM ......