TLS: certificate is not standards compliant

Questions / Help
1

so i logout using fly auth logout and I tried to sign in back using fly auth login and I kee getting this error
Error: Post “https://api.fly.io/api/v1/cli_sessions”: tls: failed to verify certificate: x509: “api.fly.io” certificate is not standards compliant

2

Interesting.

api.fly.io specifically does have at least one cert (14620589519) valid until 19th Dec 2024 (ref).

Could be that you’re hitting a Fly endpoint that isn’t presenting the latest one.

3

thanks for the reply

i don’t know, is there any way i can verify this

4

I don’t think there’s a sure shot way of verifying it as Fly may be routing to a host behind a proxy/load balancer which we won’t be able to directly reach. Fly engs must be able to verify it for us.

I ran a HEAD method on https://api.fly.io and it succeeded just fine:

curl -I "https://api.fly.io/api/v1/cli_sessions" -v

#  77.83.143.220 may point to a proxy / load balancer and not the actual host
*   Trying 77.83.143.220:443...
...
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
...
# cert checks out; incl expiry
* Server certificate:
*  subject: CN=api.fly.io
*  start date: Sep 20 11:20:52 2024 GMT
*  expire date: Dec 19 11:20:51 2024 GMT
...
*  SSL certificate verify ok.
...
> HEAD /api/v1/cli_sessions HTTP/1.1
> Host: api.fly.io
> User-Agent: curl/7.68.0
...
5

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.