[GH-ISSUE #1108] [Bug] x509: certificate signed by unknown authority #748

Closed
opened 2026-03-03 01:05:42 +03:00 by kerem · 2 comments
Owner

Originally created by @railsboot on GitHub (Dec 17, 2025).
Original GitHub issue: https://github.com/certimate-go/certimate/issues/1108

Release Version / 软件版本

v0.4.9

Description / 缺陷描述

使用docker部署项目后,发现无法正常拉起流程,提示证书问题

Steps to reproduce / 复现步骤

docker run -d
--name certimate
-p 8080:8090
-v ./certimate/config:/app/config
-v ./certimate/data:/app/data
-v /etc/ssl:/etc/ssl:ro
-e TZ=Asia/Shanghai
--restart unless-stopped
certimate/certimate:latest

Logs / 日志


Workflow Run #iblo7p71mu2tw13
手动触发于 2025-12-17 15:52:09,总计用时 0s。
workflow engine: error occurred when executing blocks: workflow engine: error occurred when executing blocks: get directory at 'https://acme-v02.api.letsencrypt.org/directory': Get "https://acme-v02.api.letsencrypt.org/directory": tls: failed to verify certificate: x509: certificate signed by unknown authority workflow engine: error occurred when executing blocks: failed to send mail: dial failed: tls: failed to verify certificate: x509: certificate signed by unknown authority
流程
日志
已失败
#efjqRYiJgaI8wDB8PPnG0 开始
[2025-12-17 15:52:09]
the workflow is starting
#L7wfEaGdtNsg5cZUAOuuV 申请
[2025-12-17 15:52:09]
ready to request certificate ...
[2025-12-17 15:52:09]
no found last issued certificate, begin to apply
[2025-12-17 15:52:09]
acme config initialized
acmeDirUrl:
"https://acme-v02.api.letsencrypt.org/directory"
[2025-12-17 15:52:10]
could not initialize acme account
[2025-12-17 15:52:10]
get directory at 'https://acme-v02.api.letsencrypt.org/directory': Get "https://acme-v02.api.letsencrypt.org/directory": tls: failed to verify certificate: x509: certificate signed by unknown authority

Miscellaneous / 其他

No response

Contribution / 贡献代码

  • I am interested in contributing a PR for this! / 我乐意为此提交代码并发起 PR!
Originally created by @railsboot on GitHub (Dec 17, 2025). Original GitHub issue: https://github.com/certimate-go/certimate/issues/1108 ### Release Version / 软件版本 v0.4.9 ### Description / 缺陷描述 使用docker部署项目后,发现无法正常拉起流程,提示证书问题 ### Steps to reproduce / 复现步骤 docker run -d \ --name certimate \ -p 8080:8090 \ -v ./certimate/config:/app/config \ -v ./certimate/data:/app/data \ -v /etc/ssl:/etc/ssl:ro \ -e TZ=Asia/Shanghai \ --restart unless-stopped \ certimate/certimate:latest ### Logs / 日志 <details> ```console Workflow Run #iblo7p71mu2tw13 手动触发于 2025-12-17 15:52:09,总计用时 0s。 workflow engine: error occurred when executing blocks: workflow engine: error occurred when executing blocks: get directory at 'https://acme-v02.api.letsencrypt.org/directory': Get "https://acme-v02.api.letsencrypt.org/directory": tls: failed to verify certificate: x509: certificate signed by unknown authority workflow engine: error occurred when executing blocks: failed to send mail: dial failed: tls: failed to verify certificate: x509: certificate signed by unknown authority 流程 日志 已失败 #efjqRYiJgaI8wDB8PPnG0 开始 [2025-12-17 15:52:09] the workflow is starting #L7wfEaGdtNsg5cZUAOuuV 申请 [2025-12-17 15:52:09] ready to request certificate ... [2025-12-17 15:52:09] no found last issued certificate, begin to apply [2025-12-17 15:52:09] acme config initialized acmeDirUrl: "https://acme-v02.api.letsencrypt.org/directory" [2025-12-17 15:52:10] could not initialize acme account [2025-12-17 15:52:10] get directory at 'https://acme-v02.api.letsencrypt.org/directory': Get "https://acme-v02.api.letsencrypt.org/directory": tls: failed to verify certificate: x509: certificate signed by unknown authority ``` </details> ### Miscellaneous / 其他 _No response_ ### Contribution / 贡献代码 - [ ] I am interested in contributing a PR for this! / 我乐意为此提交代码并发起 PR!
kerem 2026-03-03 01:05:42 +03:00
Author
Owner

@fudiwei commented on GitHub (Dec 17, 2025):

/etc/ssl/ 是 Alpine 储存根证书的地方,你把宿主机的路径挂载上去,容器内根证书就丢了。

<!-- gh-comment-id:3664161103 --> @fudiwei commented on GitHub (Dec 17, 2025): `/etc/ssl/` 是 Alpine 储存根证书的地方,你把宿主机的路径挂载上去,容器内根证书就丢了。
Author
Owner

@fudiwei commented on GitHub (Dec 17, 2025):

duplicate #577

<!-- gh-comment-id:3664165498 --> @fudiwei commented on GitHub (Dec 17, 2025): duplicate #577
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/certimate#748
No description provided.