Received an error while calling API for generating token "SSL certificate problem: certificate has expired"

[jttorate]

I received an error “SSL certificate problem: certificate has expired” while accessing API for generating token by giving authorization code. Any help? Thanks!

[zoeysaurusrawr]

I saw a ton of this today as well. Getting new access tokens was working, but subsequently token validation calls got the same error.

[robin]

We have been seeing the same problem as well.

[zhouqiugang]

This is because Auth0’s ssl CA updated to another type today, your (and my) server’s runtime ssl tool does not support it yet. I just solved this issue by upgrade the version(from NodeJS 8 to NodeJS 12). Hope this can help you.
Reference: Expo CLI - Error: certificate has expired - Expo Development Tools - Forums

[Russell.Aram]

We had to manually install the updated Root Cert on some of our older estate kit.

[jorpcolombia]

Hi! I solved the problem in my server updating OpenSSL:

yum update openssl

You may require to restart server application.

[kk.batta]

Did Auth0 revert the cert? I was looking at their cert in the morning and now. It seems to have changed

[dan.woda]

Hi folks, please take a look at this thread:

Auth0 is Down for all our Environments and all our Users are reporting an outage!

Hi folks, apologies to those of you still experiencing issues here. This issue appears to be related to a recent change made by the certificate authority (CA) used by Auth0. If you are seeing expired certificate-related errors, it is most likely a result of an expired certificate being sent with requests to Auth0. The problem seems to be that the client certificate manager is not using a version that’s accepting the proper CA. You need to remove the expired root certificate (DST Root CA X3) f…

[jttorate]

Thanks @dan.woda

Fixed the issue by adding “CURLOPT_SSL_VERIFYPEER => false,” in the curl while calling Auth0 API.

[konrad.sopala]

Thanks for sharing that @jttorate !