Keychain for Zabbix repo certificate verify failed

[Rich]

Affected Puppet, Ruby, OS and module versions/distributions

• Puppet: 5.5.16
• Ruby: ruby 2.3.1p112
• Distribution: Xenial
• Module version: 7.00

How to reproduce (e.g Puppet code you use)

Puppet code is part of puppet-zabbix

What are you seeing

SSL_connect returned=1 errno=0 state=error: certificate verify failed

What behaviour did you expect instead

Expected puppet to put keys on node

Output log

Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Wrapped exception:
SSL_connect returned=1 errno=0 state=error: certificate verify failed
Error: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-FBABD5F]/Apt_key[zabbix-FBABD5F]/ensure: change from 'absent' to 'present' failed: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Notice: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-FBABD5F]/Anchor[apt_key FBABD5FB20255ECAB22EE194D13D58E479EA5ED4 present]: Dependency Apt_key[zabbix-FBABD5F] has failures: true
Warning: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-FBABD5F]/Anchor[apt_key FBABD5FB20255ECAB22EE194D13D58E479EA5ED4 present]: Skipping because of failed dependencies
Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Wrapped exception:
SSL_connect returned=1 errno=0 state=error: certificate verify failed
Error: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-A1848F5]/Apt_key[zabbix-A1848F5]/ensure: change from 'absent' to 'present' failed: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Notice: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-A1848F5]/Anchor[apt_key A1848F5352D022B9471D83D0082AB56BA14FE591 present]: Dependency Apt_key[zabbix-A1848F5] has failures: true
Warning: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-A1848F5]/Anchor[apt_key A1848F5352D022B9471D83D0082AB56BA14FE591 present]: Skipping because of failed dependencies

This used to work it and has only been recently, that we have have started experiencing this error

[Kenyon Ralph]

Note that we aren't supporting Ubuntu 16.04 and Puppet 5 anymore because they are EOL (although this module still lists Ubuntu 16.04 support, it will likely be removed soon).

[Christos Papageorgiou]

@cypheru This is probably related to the expiration of Letsencrypt's root certificate.

Have you tried updating ca-certificates package? Maybe that will fix it.
Doesn't seems related to this module though.

[Rich]

Agreed it isn't related to the module, and is the lets encrypt root certificate expiring. Closing this Issue