Certificate has expired with new LetsEncrypt certificate

Windows 11, VS Code 1.63, Plugin 2.10.0, Bitbucket https://bitbucket.home.kfs.org/ running Bitbucket server behind nginx

Error authenticating with Bitbucket: Error: certificate has expired

‌

While trying to set up an initial Bitbucket connection, it complained the certificate was out of date. After looking at your issue list, I thought an intermediate cert might be out of date so I generated a new certificate which is validated by every tool I could find as being fully up-to date.

‌

SSL Certificate Examination
Host    bitbucket.home.kfs.org
URL https://bitbucket.home.kfs.org
Issued For  *.home.kfs.org
Issued By   Let's Encrypt ( R3 )
SSL Compression SSL Compression disabled.
SSL Chain Validation    Successfully validated certificate chain.

Issued For  *.home.kfs.org
Issued By   Let's Encrypt, US ( R3 )
Signature Algorithm RSA-SHA256
Version 2
Valid From  08-Dec-2021 19:51:21 +0000
Valid To    08-Mar-2022 19:51:20 +0000
Validity (Total)    89 days
Validity (Remaining)    86 days
Serial Number   0x0461191AA316AB37613AE396794FB96D6B04
Serial Number (Hex) 0461191AA316AB37613AE396794FB96D6B04

Issued For  Let's Encrypt, US ( R3 )
Issued By   Internet Security Research Group, US ( ISRG Root X1 )
Signature Algorithm RSA-SHA256
Version 2
Valid From  04-Sep-2020 00:00:00 +0000
Valid To    15-Sep-2025 16:00:00 +0000
Validity (Total)    1836 days
Validity (Remaining)    1373 days
Serial Number   0x912B084ACF0C18A753F6D62E25A75F5A
Serial Number (Hex) 912B084ACF0C18A753F6D62E25A75F5A

Issued For  Internet Security Research Group, US ( ISRG Root X1 )
Issued By   Digital Signature Trust Co. ( DST Root CA X3 )
Signature Algorithm RSA-SHA256
Version 2
Valid From  20-Jan-2021 19:14:03 +0000
Valid To    30-Sep-2024 18:14:03 +0000
Validity (Total)    1348 days
Validity (Remaining)    1023 days
Serial Number   85078200265644417569109389142156118711
Serial Number (Hex) 4001772137D4E942B8EE76AA3C640AB7

Addenda:

Turning on debug logging and accessing the Atlassian log window, I see:

‌

[2021-12-11 01:29:02:944] ---------------------------------------------------------------------- 
[2021-12-11 01:29:02:944] curl -X GET -H "User-Agent:atlascode/2.x axios/0.19.2" -H "X-Atlassian-Token:no-check" -H "Content-Type:application/json" -H "Authorization:Basic redacted" "https://bitbucket.home.kfs.org/rest/api/1.0/users/redacted?avatarSize=64" 
[2021-12-11 01:29:02:944] ---------------------------------------------------------------------- 
[2021-12-11 01:29:03:078]   Error: Error authenticating with Bitbucket: Error: certificate has expired
[2021-12-11 01:29:03:078]  Error: Authentication error: Error authenticating with Bitbucket: Error: certificate has expired

But if I try that from the command line:

C:\> curl -X GET -H "User-Agent:atlascode/2.x axios/0.19.2" -H "X-Atlassian-Token:no-check" -H "Content-Type:application/json" -H "Authorization:Basic redacted" "https://bitbucket.home.kfs.org/rest/api/1.0/users/redacted"
{"name":"redacted","emailAddress":"redacted@redacted","id":54,"displayName":"Oliver Smith","active":true,"slug":"redacted","type":"NORMAL","links":{"self":[{"href":"https://bitbucket.home.kfs.org/users/redacted"}]},"avatarUrl":"/users/redacted/avatar.png?redacted"}

‌

Comments (5)