[GH-ISSUE #2399] Chromium not unable to fetch and save content when saving due to custom SSL cert in chain #1448

Open
opened 2026-03-02 11:57:24 +03:00 by kerem · 2 comments
Owner

Originally created by @wongrm on GitHub (Jan 14, 2026).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2399

Describe the Bug

My organization uses a custom SSL certificate which I believe is stopping Chromium from being able to fetch a links data when saving a bookmark. The logs are as follows:

[0114/184937.877869:ERROR:cert_issuer_source_aia.cc(35)] Error parsing cert retrieved from AIA (as DER):
ERROR: Failed parsing Certificate SEQUENCE
[0114/184937.954898:ERROR:cert_verify_proc_builtin.cc(1052)] CertVerifyProcBuiltin for www.example.com failed:
----- Certificate i=3 (CN=GOV-US-CUSTOM,O=GUS,C=US) -----
ERROR: No matching issuer found
[0114/184937.955450:ERROR:ssl_client_socket_impl.cc(879)] handshake failed; returned -1, SSL error code 1, net_error -202

Steps to Reproduce

Have a custom certificate in SSL cert chain

Expected Behaviour

Be able to save content of bookmarked links

Screenshots or Additional Context

Image

Device Details

No response

Exact Karakeep Version

v0.30.0

Have you checked the troubleshooting guide?

  • I have checked the troubleshooting guide and I haven't found a solution to my problem
Originally created by @wongrm on GitHub (Jan 14, 2026). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2399 ### Describe the Bug My organization uses a custom SSL certificate which I believe is stopping Chromium from being able to fetch a links data when saving a bookmark. The logs are as follows: ``` [0114/184937.877869:ERROR:cert_issuer_source_aia.cc(35)] Error parsing cert retrieved from AIA (as DER): ERROR: Failed parsing Certificate SEQUENCE [0114/184937.954898:ERROR:cert_verify_proc_builtin.cc(1052)] CertVerifyProcBuiltin for www.example.com failed: ----- Certificate i=3 (CN=GOV-US-CUSTOM,O=GUS,C=US) ----- ERROR: No matching issuer found [0114/184937.955450:ERROR:ssl_client_socket_impl.cc(879)] handshake failed; returned -1, SSL error code 1, net_error -202 ``` ### Steps to Reproduce Have a custom certificate in SSL cert chain ### Expected Behaviour Be able to save content of bookmarked links ### Screenshots or Additional Context <img width="2574" height="687" alt="Image" src="https://github.com/user-attachments/assets/1ce84d8d-dc7f-40d6-aad6-8b815aa7654e" /> ### Device Details _No response_ ### Exact Karakeep Version v0.30.0 ### Have you checked the troubleshooting guide? - [x] I have checked the troubleshooting guide and I haven't found a solution to my problem
Author
Owner

@Wrong-Code commented on GitHub (Jan 23, 2026):

I have the exact same problem, but I don't think it has anything to do with Karakeep. The provided docker compose uses gcr.io/zenika-hub/alpine-chrome for running Chromium, and the limitation lies in that docker image, which has no provision for adding SSL certs to the trusted store.

Edit: typos

<!-- gh-comment-id:3789620847 --> @Wrong-Code commented on GitHub (Jan 23, 2026): I have the exact same problem, but I don't think it has anything to do with Karakeep. The provided docker compose uses `gcr.io/zenika-hub/alpine-chrome` for running Chromium, and the limitation lies in that docker image, which has no provision for adding SSL certs to the trusted store. Edit: typos
Author
Owner

@Wrong-Code commented on GitHub (Jan 23, 2026):

Possible related issue: jlandure/alpine-chrome#264

<!-- gh-comment-id:3789674991 --> @Wrong-Code commented on GitHub (Jan 23, 2026): Possible related issue: jlandure/alpine-chrome#264
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/karakeep#1448
No description provided.