x509: certificate signed by unknown authority

[kostaz]

Hello! We're getting the following error in the logs, preventing connection to license server:

{"component":"app","error":"Activating online licensing failed: internal error: error performing activation: failure during activation request: Post https://ols.chaosgroup.com/activate/password: x509: certificate signed by unknown authority (ccc3e1a8-94dd-409f-5afa-272be92f9507)","message":"Activating online licensing failed: internal error: error performing activation: failure during activation request: Post https://ols.chaosgroup.com/activate/password: x509: certificate signed by unknown authority (ccc3e1a8-94dd-409f-5afa-272be92f9507)","severity":"error","time":"2020-12-17T13:04:33.8634178+02:00"}

Please advise ASAP, thank you in advance

[stefan.isakov]

Most probably the problem is caused by the proxy changing the certificate that the OLS(Online License Server) is exchanging with our central license server, and that's not supported behavior.
OLS works with a self-signed certificate and authenticates with it when it connects to the backend, so when this certificate is substituted by another one in your environment the backend license server revokes it as not authentic.
Our backend web address is "ols.chaosgroup.com".
Can you check if the license server's self-signed can be allowed? Please contact your local IT System Administrator so he can help you.
The other option if you are not able to allow the OLS in your network is to borrow the license for offline usage:
https://docs.chaosgroup.com/display/...InternetAccess

[kostaz]

Thank you Stefan,
We cannot get the certificate authorization to work. We'll require your help and step-by-step guidance to solve this
This problem started out of the blue a couple of days ago, and on one machine only. The rest of the workstations in the office work fine.
-Another problem is that even borrowed offline licenses dont work, as somehow the localhost is unreachable/untrusted.
-And on top of this, we cannot release these borrowed licenses... we'll need your help to release these
It's a mess really, all related to this x509 error.

Thank you in advance

[stefan.isakov]

Yes, I can help.
Could you please send us an e-mail at support@chaosgroup.com and mention this thread and my name, so we can arrange a remote session through Team Viewer and help you.
Thank you.