[GH-ISSUE #424] NET::ERR_CERT_AUTHORITY_INVALID after a while of working properly #282

Open
opened 2026-02-25 22:33:01 +03:00 by kerem · 6 comments
Owner

Originally created by @Nefcanto on GitHub (Jan 24, 2022).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/424

Hi

I have been using mkcert for some months now and everything was working great.

However, today I suddenly saw the NET::ERR_CERT_AUTHORITY_INVALID error.

I have not changed mkcert anyhow.

I tried to verify my certificate, using openssl:

openssl verify --verbose /project/cert.pem

And this is the result:

O = mkcert development certificate, OU = root@MyLaptop
error 20 at 0 depth lookup: unable to get local issuer certificate
error /project/cert.pem: verification failed

I tried to uninstall mkcert, but since I have installed it outside apt, I did not know how to uninstall it. Here's my installation script:

    sudo apt install libnss3-tools
    wget https://github.com/FiloSottile/mkcert/releases/download/v1.4.3/mkcert-v1.4.3-linux-amd64
    sudo cp mkcert-v1.4.3-linux-amd64 /usr/local/bin/mkcert
    sudo chmod +x /usr/local/bin/mkcert
    mkcert -install

I ran mkcert -uninstall and closed Chrome and ran mkcert -install and reopened Chrome, but still no results.

What should I do? How can I fix this?

Originally created by @Nefcanto on GitHub (Jan 24, 2022). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/424 Hi I have been using `mkcert` for some months now and everything was working great. However, today I suddenly saw the `NET::ERR_CERT_AUTHORITY_INVALID` error. I have not changed `mkcert` anyhow. I tried to verify my certificate, using `openssl`: ``` openssl verify --verbose /project/cert.pem ``` And this is the result: ``` O = mkcert development certificate, OU = root@MyLaptop error 20 at 0 depth lookup: unable to get local issuer certificate error /project/cert.pem: verification failed ``` I tried to uninstall `mkcert`, but since I have installed it outside **apt**, I did not know how to uninstall it. Here's my installation script: ``` sudo apt install libnss3-tools wget https://github.com/FiloSottile/mkcert/releases/download/v1.4.3/mkcert-v1.4.3-linux-amd64 sudo cp mkcert-v1.4.3-linux-amd64 /usr/local/bin/mkcert sudo chmod +x /usr/local/bin/mkcert mkcert -install ``` I ran `mkcert -uninstall` and closed Chrome and ran `mkcert -install` and reopened Chrome, but still no results. What should I do? How can I fix this?
Author
Owner

@mattKaczorowski commented on GitHub (Feb 11, 2022):

I too am experiencing this issue with chrome and firefox on Ubuntu. Funny enough both curl and wget work fine. Both browsers have the mkcert root cert installed, yet the browsers do not trust the certs.

<!-- gh-comment-id:1036644183 --> @mattKaczorowski commented on GitHub (Feb 11, 2022): I too am experiencing this issue with chrome and firefox on Ubuntu. Funny enough both curl and wget work fine. Both browsers have the mkcert root cert installed, yet the browsers do not trust the certs.
Author
Owner

@Nefcanto commented on GitHub (Feb 12, 2022):

@mattKaczorowski I ended up completely reinstalling everything, even Ubuntu. It was truly annoying.

<!-- gh-comment-id:1036990271 --> @Nefcanto commented on GitHub (Feb 12, 2022): @mattKaczorowski I ended up completely reinstalling everything, even Ubuntu. It was truly annoying.
Author
Owner

@mattKaczorowski commented on GitHub (Feb 14, 2022):

@Nefcanto Did reinstalling fix the issue? I have tried and it did not work. Also, tried this on three different Ubuntu 20.04 machines, same result. I wonder what changed on the browser's end...

<!-- gh-comment-id:1039383547 --> @mattKaczorowski commented on GitHub (Feb 14, 2022): @Nefcanto Did reinstalling fix the issue? I have tried and it did not work. Also, tried this on three different Ubuntu 20.04 machines, same result. I wonder what changed on the browser's end...
Author
Owner

@Nefcanto commented on GitHub (Feb 17, 2022):

@mattKaczorowski yes. For me reinstalling my OS and everything solved it. Though it was extremely annoying.

<!-- gh-comment-id:1042616318 --> @Nefcanto commented on GitHub (Feb 17, 2022): @mattKaczorowski yes. For me reinstalling my OS and everything solved it. Though it was extremely annoying.
Author
Owner

@MaxRazen commented on GitHub (Apr 12, 2022):

Ubuntu 20.04 / Chrome 100.0.4896.88 the same issue. Does anyone have a solution?

@Nefcanto Could you clarify please, what is the difference between your linux installations? Have you downgraded the OS version?

UPD: I realized that forget to run mkcert -install, and after restarting browsers everything is working as suspected

<!-- gh-comment-id:1097036623 --> @MaxRazen commented on GitHub (Apr 12, 2022): Ubuntu 20.04 / Chrome 100.0.4896.88 the same issue. Does anyone have a solution? @Nefcanto Could you clarify please, what is the difference between your linux installations? Have you downgraded the OS version? **UPD:** I realized that forget to run `mkcert -install`, and after restarting browsers everything is working as suspected
Author
Owner

@Nefcanto commented on GitHub (Apr 14, 2022):

@MaxRazen, I just remember that I had to reinstall everything, including my OS.

This is my installation general guidelines and this is my installation script for other applications.

<!-- gh-comment-id:1098746024 --> @Nefcanto commented on GitHub (Apr 14, 2022): @MaxRazen, I just remember that I had to reinstall everything, including my OS. [This](https://github.com/HolismHolding/Infra/blob/main/Setup/DevelopmentEnvironment.md) is my installation general guidelines and [this](https://github.com/HolismHolding/Infra/blob/main/Setup/DevelopmentEnvironment.sh) is my installation script for other applications.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/mkcert#282
No description provided.