Issue Grafana package install CERTIFICATE_VERIFY_FAILED

[Roberto Gibertini]

Server operating system version

Ubuntu 20.40

Plesk version and microupdate number

18.0.65 Update #2

Trying to install the monitoring extension we have problem with the grafana package.
following different KB articles we try to install it from shell...
we receive the errore certificate_verify_failed
and it seems that there is no way to correct them....

we are on a updated ubuntu 20.04 linux server

 

[Vladimir C.]

Hello! The issue can be caused by Broken CA certificates configuration on OS level caused by Ubuntu bug with ID 396818:

Bug #396818 “openssl s_client behaves strangely without CAPath” : Bugs : openssl package : Ubuntu

Binary package hint: openssl 1) lsb_release -rd Description: Ubuntu 8.04.2 Release: 8.04 2) apt-cache policy openssl openssl: Installed: 0.9.8g-4ubuntu3.7 Candidate: 0.9.8g-4ubuntu3.7 Version table: *** 0.9.8g-4ubuntu3.7 0 500 http://us.archive.ubuntu.com...

bugs.launchpad.net

Warning: Before applying solution below I would recommend you create snapshot of the server.

1. Connect to the server via SSH

2. Move /usr/lib/ssl directory:

# mv /usr/lib/ssl /usr/lib/ssl_old

Reinstall CA certificates:

# apt-get install --reinstall openssl ca-certificates

Ensure that the certificate can be obtained without any errors:

# python2 -c 'import urllib2 ; print urllib2.urlopen("https://packages.grafana.com/gpg.key").read()'
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
mQENBFiHXVIBCADr3VDEAGpq9Sg/xrPVu1GGqWGXdbnTbbNKeveCtFHZz7/GSATW
...

Reinstall Grafana extension:

# plesk bin extension --uninstall grafana
# plesk bin extension --install grafana

Verify Grafana package was installed successfully:

# dpkg --list | grep grafana
ii grafana amd64 Grafana

Please let me know if the issues still persists after that.

 

[Roberto Gibertini]

the command:
python2 -c 'import urllib2 ; print urllib2.urlopen("https://packages.grafana.com/gpg.key").read()'
report the usual error CERTIFICATE_VERIFY_FAILED

 

[Vladimir C.]

If the issue still persists and you reinstalled certificates it's most likely system issue as I was not able to reproduce described behavior in the test environment on Ubuntu 20 and Plesk 18.0.65. Grafana was installed without issues.

I would recommend check and sync system time on server as sometimes it can cause such issues. If this does not help please consider creating ticket to Plesk technical support team for further investigation.