Dear Team,
I have been successfully using the OttoFMS and OttoDeploy tools.
Currently, on one server, I keep getting the following error:
Build server is unreachable: fetch failed: Error: unable to verify the first certificate
Can I get some indication as to why this keeps happening?
I am trying to move a copy of my Databases from my Production Server to the Development Server so that it moves with the Data. I am doing a Replace/Install Operation.
Hello Aly,
Welcome to the community, its good to have you!
That error indicates that there is an issue with the certificates on your web server. In this case it means that somewhere in the certificate chain, presumably somewhere on your source server, there is a missing or invalid SSL certificate. I would try verifying your certificate setup on your servers to make sure everything is working as intended.
Is this the first time you’ve used this server as a source? If this suddenly started happening on a server that was working perhaps one of your certificates expired, otherwise I suspect the error is due to a missing or misconfigured cert.
-Kyle
Hi Kyle,
The SSL is perfectly valid till 2024-06-08 23:59:59 UTC
I do not know what the problem could possibly be wrong.
If I run a deployment from the Dev to the Production server, it seems to be working just fine.
Aly
Hello Aly
You may want to try reinstalling the certificate on that machine. Make sure you install the intermediates when you do that.
You could also try an SSL Checking tool.
https://www.digicert.com/help/
They will warn you if you aren’t using there service, but the rest of the validations are pretty good.
Todd
Hello, i have the same problem like this man.
I check my ssl cert from digicert and everything is ok. all green.
in the prod and the dev server.
Maybe something like firewall or something ?
Please help me.
Hi.
We resolved the problem as one of the SSL was broken in its chain. Something it happens that you need to re-install the SSL.
Use the following tool and scope all your servers:
This is what solved our issue where we noticed one of them was broken.
Goodluck and let me know if it works.
Yes. That is what we see as well.
Reinstalling the certs and making sure to include the intermediate bundle solves this problem most of the time.
Thanks
Todd
Hello,
Thanks for the reply.
Maybe the problem is elsewhere.
here the error i got everytime i go in the server menu.
Can you help me ?
Elouan
Hello again,
Just to update my problem of ssl, i check in everyway it can be block the 443 request.
But no firewall block my 2 servers to communicate.
Also, my servers are in the same network so i don’t know why i have to verify the ssl certificate.
Thanks for answering.
Elouan
Hello,
So sorry this happening to you.
If you are getting the error that says “Unable to verify first certificate” then the only fix we know of is to reinstall your certificate making sure you include the intermediate certificate as we described above.
It doesn’t matter if your servers are both on the same network. You still need a secure https connection between them.
If you would like some more help, you could come by office hours. We can take a look in a little more detail with you then.
Todd
Hello !
I correct my problem.
You were right, i was in fact need the intermediate certificate.
after adding it and restart the services, the deploy/migrate works !!!
What a relief !
Thanks for your help !
Elouan
Oh that is great news.
Thanks so much for letting us know. It will help people in the future.
Thanks
Todd
This thread helped us greatly, thanks! Our company changed certificate provider. We never used intermediate certificate before, and it turns out we had to this time. This was confirmed by otto migrations not working, then the digicert tool almost had all the green checks, but in the end was saying that it was not trusted and would probably be settled by adding an intermediate certificate!
