[SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

cmskipsey · 2020-04-15 01:26:21

I'm having trouble accessing ANY website. Doesn't seem to matter which browser, but Brave browser gives this error:

NET::ERR_CERT_AUTHORITY_INVALID

Firefox just times out and says no internet (`ping` tells me we have internet connection and I've tried different WiFi connections). Qutebrowser pops up and asks me to approve certificates one by one. All browsers have been removed and reinstalled to no avail.

I tried adding an Authority certificate https://superuser.com/questions/1083766 … me#1083768 - but this only works per website / domain.

I also tried reinstalling `archlinux-keyring` and running `trust extract-compat` and checked my system time using `timedatectl` - ntp is setup, time and timezone is 100% correct.

This issue began while I was fixing an issue with system time which turned out to just be an incorrect setting in `~/.zprofile` which set `$TZ` to wrong timezone. I figured once system time was fixed the issue would be fixed. No dice.

System is 100% up to date as of last night. What should I try next? Which, if any, modules should I try to reinstall?

Last edited by cmskipsey (2020-04-15 12:15:51)

ZachC · 2020-04-15 02:19:51

It definitely sounds like a time issue. Can you elaborate on the zprofile issue? Doesn't seem like zprofile would have anything to do with your browser

Also, you might reinstall your certificate packages:

 # pacman -ySu ca-certificates ca-certificates-mozilla ca-certificates-utils

cmskipsey · 2020-04-15 02:48:08

Well I usually change timezones with `timedatectl set-timezone` then `sudo hwclock --systohc` but this time it wasn't working. After much frustration, I found that zprofile had a line `export TZ="Europe/Lisbon" instead of my desired TZ Australia/Brisbane. Turns out `hwclock` uses this environment variable to read the TZ which was being set incorrectly at boot by zprofile! After removing that line, time was set correctly and updating with ntp correctly.

That ca-certificates sounds right, I'll do that tonight and let you know how it goes

jasonwryan · 2020-04-15 02:52:33

cmskipsey wrote:

I found that zprofile had a line `export TZ="Europe/Lisbon" instead of my desired TZ Australia/Brisbane. Turns out `hwclock` uses this environment variable to read the TZ which was being set incorrectly at boot by zprofile!

Nope. Nothing other than you writes to .zprofile (at least on Arch).

cmskipsey · 2020-04-15 04:36:27

ok, tried `pacman -ySu ca-certificates ca-certificates-mozilla ca-certificates-utils` which re-installed those packages and did a full update which upgraded a couple of other packages

also i don't think its related to the system time, as usually a system time error in the browser is different to the error its giving me

What else can I try? I'm getting to the stage of doing a full reinstall, which i really don't wanna do... especially for something that should be fixable some other way

seth · 2020-04-15 06:04:13

https://bbs.archlinux.org/viewtopic.php … 4#p1898304

My money is on https://www.archlinux.org/news/nss3511- … ervention/
Please post your complete pacman log.

cmskipsey · 2020-04-15 06:07:44

Ok, I think you're on the money with the nss, I don't recall getting the file exists error recently, but I can't rule it out. I'll post the pacman log tonight

cmskipsey · 2020-04-15 08:53:32

Yay!!! Ok, so I recall that polybar stopped working and updating it threw file exists error relating to "p11-kit-trust.so", so after checking if it belonged to package with pacman -Qo p11-kit-trust.so, which reported it as unowned, I renamed it to p11-kit-trust.so.bak. Thus ensued 3 days of entertainment and mainly me not linking the issue to the renaming of that file and following every other possible solution, not the right one of course.

I renamed "p11-kit-trust.so" and ran "pacman -Syu nss --overwrite /usr/lib\*/p11-kit-trust.so", rebooted, all fixed

Phew! Thanks heaps folks, Arch community rocks!!!

fukawi2 · 2020-04-15 10:04:53

And this is why we read the news.....! Glad you found the issue and worked it out.

seth · 2020-04-15 12:12:21

Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

fossnik · 2020-04-20 18:33:15

cmskipsey wrote:

Yay!!! Ok, so I recall that polybar stopped working and updating it threw file exists error relating to "p11-kit-trust.so", so after checking if it belonged to package with pacman -Qo p11-kit-trust.so, which reported it as unowned, I renamed it to p11-kit-trust.so.bak. Thus ensued 3 days of entertainment and mainly me not linking the issue to the renaming of that file and following every other possible solution, not the right one of course.
I renamed "p11-kit-trust.so" and ran "pacman -Syu nss --overwrite /usr/lib\*/p11-kit-trust.so", rebooted, all fixed
Phew! Thanks heaps folks, Arch community rocks!!!

Funny - I made the exact same mistake (of renaming p11-kit-trust.so to p11-kit-trust.so.bak). Your solution worked for me! Thanks!

Last edited by fossnik (2020-04-20 18:33:31)

cmskipsey · 2020-04-21 05:44:49

Glad you found it useful! This issue made me lose my sh!t for 3 days trying to fix it lol

I think now if I get any errors or issues after an upgrade I'll check the arch Linux website first before going on a wild goose chase.

Arch Linux

#1 2020-04-15 01:26:21

[SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#2 2020-04-15 02:19:51

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#3 2020-04-15 02:48:08

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#4 2020-04-15 02:52:33

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#5 2020-04-15 04:36:27

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#6 2020-04-15 06:04:13

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#7 2020-04-15 06:07:44

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#8 2020-04-15 08:53:32

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#9 2020-04-15 10:04:53

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#10 2020-04-15 12:12:21

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#11 2020-04-20 18:33:15

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

#12 2020-04-21 05:44:49

Re: [SOLVED] Browser access problem NET::ERR_CERT_AUTHORITY_INVALID

Board footer