Windows error 0x80090325, -2146893019

Detailed Error Information

SEC_E_UNTRUSTED_ROOT[1]

MessageThe certificate chain was issued by an authority that is not trusted.
Declared inwinerror.h

HRESULT analysis[2]

FlagsSeverityFailure
Reserved (R)false
OriginMicrosoft
NTSTATUSfalse
Reserved (X)false
FacilityCode9 (0x009)
NameFACILITY_SSPI[2][1]
DescriptionThe source of the error code is the Security API layer.[2][1]
Error Code805 (0x0325)

Questions

8votes
1answer

The certificate chain issued by an untrusted authority

I am using the curl terminal and while issuing the following command :- curl --anyauth --user admin:admin "https://localhost:8000/LATEST/search?q=caesar" I am getting below alert :- > curl: (77) schannel: next InitializeSecurityContext failed: > SEC_E_UNTRUSTED_ROOT (0x80090325) - The certificate chain was issued by an > authority that is not trusted. Please suggest. [...] read more
ssl
curl
marklogic
4votes
1answer

System Account Logon Failures every 30 seconds

We have two Windows 2008 R2 SP1 servers running in a SQL failover cluster. On one of them we are getting the following events in the security log every 30 seconds. The parts that are blank are actually blank. Has anyone seen similar issues, or assist in tracking down the [...] read more
windows-server-2008
security
windows-event-log
failovercluster
4votes
2answers

Composer Require 'package' throws OpenSSL error

This problem seems to be common, and i've been through a lot of SO posts related to it and nothing works, and i'm going crazy. Whats weird is that it was working perfectly few weeks ago, and i didnt install anything new since months... Setup : * PHP 7.1.9 * [...] read more
php
composer-php
ssl-certificate
packagist
4votes
0answers

Assistance with Audit Failure 4625 messages caused by WCF netTcpBinding with clientCredentialType Certificate

We are having a considerable number of Audit Failure Events (4652) coming through to the Windows Event Log, caused by our WCF services. Question > Does anyone know why we could be receiving these audit log entries, and how > can we stop them from occurring WITHOUT removing certificate security [...] read more
c#
wcf
security
ssl
client-certificates
4votes
0answers

cURL SSL Certificate working on Linux but not on Windows

I am using cURL to do a GET Request to a URL using HTTPS protocol. I retrieved the CA Cert file from the owners of the webservice. The .crt file works in RHEL5 but not in windows, using the same command. Below are the commands I am using: RHEL5 without [...] read more
linux
ssl
curl
ssl-certificate
3votes
2answers

ktor client https request with self-signed certificate

I have a Ktor server application (rest api) running with a self signed certificate. It works fine from a browser (after a warning and a confirmation) port 80 is redirected to 8443. But if I try this from a Ktor Apache Client: fun main(args: Array<String>) = runBlocking { val client [...] read more
kotlin
ktor
2votes
1answer

How to pass the -k or --insecure argument to curl in the R package "httr"?

TLDR: I'm getting an error message saying: > schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT > (0x80090325) - The certificate chain was issued by an authority that is not > trusted. According to this thread, I've got to force curl into ignoring certificate errors, thus requiring the argument -k or -insecure. A [...] read more
r
curl
httr
2votes
1answer

devtools::install_github error: SEC_E_UNTRUSTED_ROOT - The certification chain was issued by an entity that is unreliable

I am trying to install an package from behind a corporate (fire)wall using devtools: library(devtools) devtools::install_github("aryoda/tryCatchLog") I get an error message: Error: Failed to install 'unknown package' from GitHub: schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325) - The certification chain was issued by an entity that is unreliable. The reason seems [...] read more
r
curl
certificate
devtools
1vote
0answers

Continuous Login Errors on Edge Server from Hub Server

We are running Exchange 2010 with one hub/cas server and 1 edge server and I noticed an odd thing happening in the security event log. Every 30 seconds on the Edge server I will get a login error that originates from the hub server: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: [...] read more
exchange
exchange-2010
1vote
1answer

Geocode, error message, (google map, google_geocode, api)

I keep getting error messages when I try the below code, the error message is > "Error in open.connection(con, "rb") : schannel: next > InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325) - The > certificate chain was issued by an authority that is not trusted." However it doesn't seem like my code is [...] read more
r
api
google-maps
geocode
googleway
0votes
0answers

Unable to start sauce connect with proxy - next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT

I am using latest sauce connect in windows and works fine without proxy. Now if I use browsermobproxy, and try to start sauce connect, it fails with error >sc -u userName -k token -i tunnelName --proxy 127.0.0.1::9091 --doctor !!! ERROR: connecting via 127.0.0.1::9091 to http://saucelabs.com:443: Couldn't connect to server. INFO: [...] read more
saucelabs
browsermob-proxy
browsermob
0votes
2answers

Apache 2 Mutual TLS Authentication Only Working with "SSLClientVerify optional_no_ca"

I am trying to use Apache2 to provide a REST-API, with mutual TLS Authentication. If l set the SSLVerifyClient option to require, l don't get the client certificate due to the SSL connection not being established due to what looks like the Server/ Client certificate validation. I am using internal [...] read more
authentication
openssl
apache2
tls1.2
x509certificate2
0votes
1answer

R API call fails due to certificate chain issued by an authority that is not trusted

I'm just starting to get my feet wet in the API waters, and I'm trying to follow along the "Send a simple request" section at this link. When executing github_api <- function(path) { url <- modify_url("https://api.github.com", path = path) GET(url) } resp <- github_api("/repos/hadley/httr") I get the following error message: [...] read more
r
api
httr
0votes
0answers

Self-signed certificate with FTPS and curl in R

I want to securely download data in R from an FTP server which supports explicit FTP over SSL. For development and testing of my code, I set up a local FTP server (FileZilla Server) and try to access it from R using the curl library from CRAN. The FTP server [...] read more
r
ssl
curl
ftp
certificate
0votes
1answer

How to install root certificate in aspnet:3.0 base image for windows container

I am hosting two windows containers from a Windows 2019 servers and both are running in https. When my Web URL container tried to make a call to the API container. It didn't work and when I got inside the Web container and run the curl command to my API [...] read more
windows
docker
asp.net-core-3.0
0votes
0answers

"The certificate chain was issued by an authority that is not trusted" - Error when using RVest

I am trying to scrape a website with the html_session() function of the rvest package. When I try to acces the website (a local proxy authentication website), I get this error: Error in curl::curl_fetch_memory(url, handle = handle) : schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325) - The certificate chain was issued [...] read more
r
rvest
0votes
0answers

MSXML2.ServerXMLHTTP.6.0 object in VBScript - SSL certificate chain trust problem

I need to make an HTTP request from VBScript to a domain secured with SSL. The library I'm using to do that, ServerXMLHTTP, doesn't seem to be able to connect due to SSL certificate trust failure. This seems strange, as when I browse to the domain in Google Chrome, it [...] read more
ssl
https
vbscript
serverxmlhttp
schannel
0votes
0answers

Issues in installation of dev version of ggmap library in R

I am using RStudio to with R 3.5.2 installed in my Windows 7 machine. I am trying to use ggmap to load google map based on certain parameters but this fails because the authentication key is not provided and a 403 error as below occurs > Error in download.file(url, destfile [...] read more
r
google-maps
ggplot2
ggmap
devtools
0votes
1answer

Smartcard Authentication stopped working on IIS 7.5 - everybody gets 401

Everything was fine when we left on Friday. After the weekend, all users get 401 trying to authenticate to the web site. Our Web Server is IIS 7.5 in Windows Server 2008 R2. The site's SSL Settings are Require SSL and client certificate required. The Web Server level Authentication options [...] read more
iis
smartcard
http-status-code-401
0votes
0answers

jenkins pipeline gives "polling failed" Error performing command: git.exe ls-remote -h returned status code 128

I have 2 jobs in Jenkins. One is a regular project, and polls git perfectly fine, every commit, kicks off the job and all is well. I am taking this project and converting it to a Pipeline project, and it does not trigger when there is a commit to git. [...] read more
git
github
jenkins
groovy
jenkins-pipeline
0votes
1answer

HTTP Error 401.2 and Login Error 0x80090325 During Client Certificate Mapping Authentication

I am receiving HTTP error 401.2 when trying to authenticate to a website in IIS using the client certificate mapping module (clientCertificateMappingAuthentication). I have followed the instructions to set this up on a new website that serves a single html page. I've enabled client certificate mapping at the applicationhost.config level [...] read more
security
authentication
iis
ssl
iis-7.5
-1votes
1answer

SSL certificate issues preventing pip package installs on windows

I installed Python 3.8 from the python.org downloads site onto my 64-bit Windows machine today. Shortly thereafter, I attempted to install the pyodbc package using pip from a command console opened as an administrator: pip install pyodbc The following error broke my connection on several attempts: > 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] [...] read more
python
pip
ssl-certificate

Comments

Leave a comment

(plain text only)

Sources

  1. winerror.h from Windows SDK 10.0.14393.0
  2. https://msdn.microsoft.com/en-us/library/cc231198.aspx

User contributions licensed under CC BY-SA 3.0