Error with certificate authority when running applications

TactfulDeity · 2022-05-20 23:52:32

Hello fellow Archers,
I am new to the Arch Linux scene. I come from windows, but I have experience with Kali Linux and working with Ubuntu command line for servers. After quite a bit of research I have still come to an error with getting proper certs for specific HTTPS sites. I have already referred to much of the documentation in regards to setting up unique DNS servers and I am connected to the internet through either net. My machine is being issued an IP by my DHCP router and I am running my DNS through 8.8.8.8 with a backup of 8.8.4.4. I am posting to this forum from the Mozilla Firefox on the machine at this moment. Which I was able to access finally after manually reinstalling ca-certificates-mozilla post startup. The two applications I am having issues with at the moment are Discord and Steam (I followed all installation steps for which from Arch Documentation). Without further ado here is the stack traces:

[nathan@Haven ~]$ discord
Discord 0.0.17
Starting app.
Starting updater.
[Modules] Modules initializing
[Modules] Distribution: remote
[Modules] Host updates: enabled
[Modules] Module updates: enabled
[Modules] Module install path: /home/nathan/.config/discord/0.0.17/modules
[Modules] Module installed file path: /home/nathan/.config/discord/0.0.17/modules/installed.json
[Modules] Module download path: /home/nathan/.config/discord/0.0.17/modules/pending
[Modules] No updates to install
[Modules] Checking for host updates.
Error downloading with electron net: net::ERR_CERT_AUTHORITY_INVALID
Falling back to node net library..
[Updates] Error fetching [url]https://discord.com/api/updates/stable?platform=linux&version=0.0.17[/url]: unable to get local issuer certificate
[Modules] Host update failed: Error: unable to get local issuer certificate

[nathan@Haven ~]$ steam
steam.sh[11225]: Running Steam on arch rolling 64-bit
steam.sh[11225]: STEAM_RUNTIME is enabled automatically
setup.sh[11297]: Steam runtime environment up-to-date!
steam.sh[11225]: Can't find 'steam-runtime-check-requirements', continuing anyway
[2022-05-20 19:44:16] Startup - updater built Nov 22 2021 22:06:59
ILocalize::AddFile() failed to load file "public/steambootstrapper_english.txt".
Installing breakpad exception handler for appid(steam)/version(0)
[2022-05-20 19:44:16] Loading cached metrics from disk (/home/nathan/.local/share/Steam/package/steam_client_metrics.bin)
[2022-05-20 19:44:16] Failed to load cached hosts file (File 'update_hosts_cached.vdf' not found), using defaults
[2022-05-20 19:44:16] Using the following download hosts for Public, Realm steamglobal
[2022-05-20 19:44:16] 1. [url]http://media.steampowered.com[/url], /client/, Realm 'steamglobal', weight was 1, source = 'baked in'
Installing breakpad exception handler for appid(steam)/version(1.0)
[2022-05-20 19:44:16] Verifying installation...
[2022-05-20 19:44:16] Unable to read and verify install manifest /home/nathan/.local/share/Steam/package/steam_client_ubuntu12.installed
[2022-05-20 19:44:16] Verification complete
[2022-05-20 19:44:16] Downloading Update...
[2022-05-20 19:44:16] Checking for available update...
[2022-05-20 19:44:16] Downloading manifest: [url]http://media.steampowered.com/client/steam_client_ubuntu12[/url]
Installing breakpad exception handler for appid(steam)/version(1.0)
[2022-05-20 19:44:16] Download failed: http error 403 (media.steampowered.com/client/steam_client_ubuntu12)
[2022-05-20 19:44:16] DownloadManifest - exhausted list of download hosts
[2022-05-20 19:44:16] Failing manifest download with http error 403 
[2022-05-20 19:44:16] Error: Download failed: http error 403
[2022-05-20 19:44:16] Saving metrics to disk (/home/nathan/.local/share/Steam/package/steam_client_metrics.bin)
[2022-05-20 19:44:16] Error: Steam needs to be online to update.         Please confirm your network connection and try again.
[2022-05-20 19:44:18] Shutdown
Installing breakpad exception handler for appid(steam)/version(1.0)
src/tier0/threadtools.cpp (3594) : Assertion Failed: Illegal termination of worker thread 'Thread(0x0x589c9ed0/0x0xe52fea'
src/tier0/threadtools.cpp (3594) : Assertion Failed: Illegal termination of worker thread 'Thread(0x0x589c9ed0/0x0xe52fea'
Installing breakpad exception handler for appid(steam)/version(1.0)
assert_20220520194419_7.dmp[11359]: Uploading dump (out-of-process)
/tmp/dumps/assert_20220520194419_7.dmp
Installing breakpad exception handler for appid(steam)/version(1.0)

Also I had to reinstall ca-certificates-mozilla package twice during this post trying to get it to let me access the forum. It lets me view the certificate in mozilla and its issued from cisco and the time shows it should be valid. Using

trust list

I am able to pull a fairly extensive list of certs and I have also verified package11 is properly installed. My datetime and locale are also set correctly. Can someone help me out with this? My networking knowledge is basic so I apologize in advance if this is a dumb question or the phrasing is confusing.

Edit:
Here's an updated trace of discord run:

[nathan@Haven ~]$ discord --trace-warnings
Discord 0.0.17
Starting app.
Starting updater.
[Modules] Modules initializing
[Modules] Distribution: remote
[Modules] Host updates: enabled
[Modules] Module updates: enabled
[Modules] Module install path: /home/nathan/.config/discord/0.0.17/modules
[Modules] Module installed file path: /home/nathan/.config/discord/0.0.17/modules/installed.json
[Modules] Module download path: /home/nathan/.config/discord/0.0.17/modules/pending
[Modules] No updates to install
[Modules] Checking for host updates.
[Modules] Host is up to date.
[Modules] Checking for module updates at https://discord.com/api/modules/stable/versions.json
[Modules] No module updates available.
Module ./ElectronTestRpc was not included.
[WebContents] did-fail-load -202 ERR_CERT_AUTHORITY_INVALID retry in 1000 ms
(node:14262) electron: Failed to load URL: https://discordapp.com/app?_=1653093916962 with error: ERR_CERT_AUTHORITY_INVALID
(Use `discord --trace-warnings ...` to show where the warning was created)
[WebContents] retrying load https://discordapp.com/app?_=1653093916962
[WebContents] did-fail-load -202 ERR_CERT_AUTHORITY_INVALID retry in 2646.538881556483 ms
(node:14262) electron: Failed to load URL: https://discordapp.com/app?_=1653093916962 with error: ERR_CERT_AUTHORITY_INVALID
[WebContents] retrying load https://discordapp.com/app?_=1653093916962
[WebContents] did-fail-load -202 ERR_CERT_AUTHORITY_INVALID retry in 6782.156859301735 ms
(node:14262) electron: Failed to load URL: https://discordapp.com/app?_=1653093916962 with error: ERR_CERT_AUTHORITY_INVALID

Last edited by TactfulDeity (2022-05-21 00:48:17)

loqs · 2022-05-21 00:14:05

The certificate you inspected in firefox for https://bbs.archlinux.org was issued by Cisco not 'Let's Encrypt'? Is the certificate for https://discord.com/ issued by Cisco or 'Cloudflare, Inc.'?

TactfulDeity · 2022-05-21 00:25:09

loqs wrote:

The certificate you inspected in firefox for https://bbs.archlinux.org was issued by Cisco not 'Let's Encrypt'? Is the certificate for https://discord.com/ issued by Cisco or 'Cloudflare, Inc.'?

That is correct prior to reinstall of mozilla certs package the issuer was cisco, after reinstall and browser cache refresh it changed to Let's Encrypt. In mozilla the current issuer for https://discord.com/ is Cloudflare, Inc. However, when I run the application discord I receive the following:

[nathan@Haven ~]$ discord
Discord 0.0.17
Starting app.
Starting updater.
[Modules] Modules initializing
[Modules] Distribution: remote
[Modules] Host updates: enabled
[Modules] Module updates: enabled
[Modules] Module install path: /home/nathan/.config/discord/0.0.17/modules
[Modules] Module installed file path: /home/nathan/.config/discord/0.0.17/modules/installed.json
[Modules] Module download path: /home/nathan/.config/discord/0.0.17/modules/pending
[Modules] No updates to install
[Modules] Checking for host updates.
[Modules] Host is up to date.
[Modules] Checking for module updates at [url]https://discord.com/api/modules/stable/versions.json[/url]
[Modules] No module updates available.
Module ./ElectronTestRpc was not included.
[WebContents] did-fail-load -202 ERR_CERT_AUTHORITY_INVALID retry in 1000 ms
(node:12751) electron: Failed to load URL: [url]https://discordapp.com/app?_=1653092320526[/url] with error: ERR_CERT_AUTHORITY_INVALID
(Use `discord --trace-warnings ...` to show where the warning was created)
[WebContents] retrying load [url]https://discordapp.com/app?_=1653092320526[/url]
[WebContents] did-fail-load -202 ERR_CERT_AUTHORITY_INVALID retry in 1030.1812497764495 ms
(node:12751) electron: Failed to load URL: [url]https://discordapp.com/app?_=1653092320526[/url] with error: ERR_CERT_AUTHORITY_INVALID
[WebContents] retrying load [url]https://discordapp.com/app?_=1653092320526[/url]
[WebContents] did-fail-load -202 ERR_CERT_AUTHORITY_INVALID retry in 2972.647165529599 ms
(node:12751) electron: Failed to load URL: [url]https://discordapp.com/app?_=1653092320526[/url] with error: ERR_CERT_AUTHORITY_INVALID

Last edited by TactfulDeity (2022-05-21 00:38:20)

ewaller · 2022-05-21 00:33:37

TactfulDeity, welcome to the forums. Can I get you to use BBCode Code tags around your program output and file contents? You readers appreciate it.
https://bbs.archlinux.org/help.php#bbcode That same link is under all the post boxes on the forums.

Thanks.

TactfulDeity · 2022-05-21 01:16:57

Update: I was able to get steam running (discord still throws invalid_certificate_authority even after reinstall) by completely uninstalling it and updating ca-certificates-mozilla then reinstalling. But when i get to login screen it cant access the server. Opening link in a mozilla tab I get blocked by cisco for invalid certificate. After such an occurance all certificates are thrown back to cisco by default issuer and become invalid certification authority for all HTTPS websites. I believe the issue is the certificates issued expire way to soon between 5-15 min causing the websites to block me out upon reload. That being said reinstalling the ca-certificates-mozilla package corrects the issue for about 5-15 min. Therefore, I believe the solution now is figuring out why the certificates issued expire so quick, if there is not an obvious fix is there a workaround that would cause my certificates/trust list to refresh with each page call or on a repeated schedule?

Last edited by TactfulDeity (2022-05-21 01:18:08)

Arch Linux

#1 2022-05-20 23:52:32

Error with certificate authority when running applications

#2 2022-05-21 00:14:05

Re: Error with certificate authority when running applications

#3 2022-05-21 00:25:09

Re: Error with certificate authority when running applications

#4 2022-05-21 00:33:37

Re: Error with certificate authority when running applications

#5 2022-05-21 01:16:57

Re: Error with certificate authority when running applications

Board footer