cr.netapp.io certificate expired | NetApp | Page 1

sage cedar Mar 22, 2024, 7:02 PM

#

Our pods are failing to deploy due to expired SSL certificate on cr.netapp.io domain.

Warning Failed 42 mins ago Failed to pull image "cr.netapp.io/harvest:latest": rpc error: code = Unknown desc = Error response from daemon: Get "https://cr.netapp.io/v2/": x509: certificate has expired or is not yet valid: current time 2024-03-22T14:19:42-04:00 is after 2024-02-18T23:59:59Z

$ curl -vvI https://cr.netapp.io/

About to connect() to cr.netapp.io port 443 (#0)
Trying 152.195.19.97...
Connected to cr.netapp.io (152.195.19.97) port 443 (#0)
Initializing NSS with certpath: sql:/etc/pki/nssdb
CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
Server certificate:

subject: CN=sni27df6gl.wpc.edgecastcdn.net,O=Edgecast Inc.,L=Los Angeles,ST=California,C=US

```
start date: Jan 18 00:00:00 2023 GMT
```
```
expire date: Feb 18 23:59:59 2024 GMT
```

common name: sni27df6gl.wpc.edgecastcdn.net

issuer: CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US

NSS error -8181 (SEC_ERROR_EXPIRED_CERTIFICATE)
Peer's Certificate has expired.
Closing connection 0
curl: (60) Peer's Certificate has expired.

quaint walrus Mar 25, 2024, 8:06 AM

#

@sage cedar We are checking this. In meantime, You can use alternative repo as below.

Github: docker pull ghcr.io/netapp/harvest:latest
Dockerhub: docker pull rahulguptajss/harvest:latest

inland compass Mar 28, 2024, 2:17 AM

#

This looks relevant...
From: https://github.com/NetApp/harvest/releases
Harvest containers are published to GitHub's container registry (https://github.com/NetApp/harvest/pkgs/container/harvest) in addition to DockerHub and cr.netapp.io.
If you're using cr.netapp.io, we encourage you to switch to ghcr.io or DockerHub. In 2024, we will stop publishing to cr.netapp.io.

#cr.netapp.io certificate expired