← Back to issue list

snapcraftcontent.com shows certificate error

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1946406
Type
issue
State
open
Author
~steve010
Labels
—
Created
Updated
Closed
—

Current evaluation

Revoked SSL certificate on canonical-bos01.cdn.snapcraftcontent.com broke automated snap downloads. Open ~5 years with zero maintainer interaction; a similar CDN cert issue was resolved externally by Canonical renewing certificates.

Suggested action: close stale

Reason: The issue has had no activity for ~1789 days (0 comments, no labels, no maintainer response), and the underlying problem is no longer applicable: a near-identical report (#1947430, 'snapcraft content websites have expired certificates') was closed after Canonical renewed the CDN certificates externally, and a certificate revoked in 2020 would have been rotated long ago. It is also not addressable in this codebase, which contains no CDN/certificate configuration.

Impact: 20 Quick Win: 18.0 Staleness: 95 Complexity: 10 Confidence: 70 Support Request: 55

Issue body

We have an automated build pipeline that uses vagrant to build an ubuntu VMWare image. As part of the build it installs multiple snaps from canonical-bos01.cdn.snapcraftcontent.com. This is erroring however as this URL is showing that a certificate in the chain has been revoked. Running it through the Qualys SSL Labs tests here https://www.ssllabs.com/ssltest/analyze.html?d=canonical-bos01.cdn.snapcraftcontent.com shows the certificate has been revoked which we believe is causing our problems. Would someone be able to investigate please. I've attached a screen shot of the revoked certificates details. As a work around is there a way to point the snap to come from a different CDN/URL? Thanks. Steve Esler

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.8-27b
Impact: 20
Quick Win: 18.0
Staleness: 95
Complexity: 10
Confidence: 70
Support Request: 55
close stale Revoked SSL certificate on canonical-bos01.cdn.snapcraftcontent.com broke automated snap downloads. Open ~5 years with zero maintainer interaction; a similar CDN cert issue was resolved externally by Canonical renewing certificates.
qwen/qwen3.6-35b-a3b
Staleness: 95
Complexity: 10
Confidence: 90
Support Request: 75
close stale Revoked SSL certificate on canonical-bos01.cdn.snapcraftcontent.com causing build pipeline failures, with a request for investigation and CDN workaround.
qwen/qwen3.6-35b-a3b
Staleness: 98
Complexity: 10
Confidence: 90
Support Request: 5
close stale Reports a revoked SSL certificate on canonical-bos01.cdn.snapcraftcontent.com causing build pipeline failures. Unaddressed for nearly 5 years with no maintainer response.
qwen/qwen3.6-35b-a3b
Staleness: 98
Complexity: 20
Confidence: 90
Support Request: 10
close stale External contributor reports revoked SSL certificate on canonical-bos01.cdn.snapcraftcontent.com breaking build pipelines. Issue has been completely inactive for nearly five years with no maintainer response or labels.
qwen3.6-35b-a3b-mtp-q6
Staleness: 95
Complexity: 20
Confidence: 90
Support Request: 30
close stale Report of a revoked SSL certificate on canonical-bos01.cdn.snapcraftcontent.com breaking automated snap builds. Issue has been inactive for over 4.5 years with no maintainer response or labels.
qwen3.6-35b-a3b-mtp-q6
Staleness: 98
Complexity: 30
Confidence: 90
Support Request: 20
close stale Automated build pipeline fails due to revoked SSL certificate on canonical-bos01.cdn.snapcraftcontent.com. Open for nearly 5 years with zero maintainer response or labels.

Update history

No update history recorded yet.

Related work

  • Related To: snapcraft (launchpad)#1947430 (confidence 85%)

    Same CDN certificate problem class; closed after Canonical renewed the snapcraftcontent.com certificates externally, indicating this issue's problem was resolved the same way.

Related issues

Issue Project State Summary Similarity
#1947430 snapcraft content websites have expired certificates snapcraft (launchpad) closed Closed without comments. The expired Snapcraft CDN certificates were resolved externally by Canonical renewing them, restoring access and allowing the LXD snap installation and Ubuntu release upgrade to complete successfully.
80%
#2073910 snapcraft cannot connect through a transparent SSL proxy snapcraft (launchpad) open snapcraft fails with SSL CERTIFICATE_VERIFY_FAILED behind transparent MITM proxies; no system CA store option exists. Open 772 days, 0 comments, no labels, no maintainer engagement.
71%