ERR_CERT_HAS_EXPIRED_ Digicert certificate expiry 2023
An important Digicert Certificate has expired today (8th March 2023) causing TLS validation issues on the USS Gateway. The USS Gateway proxy uses the Ubuntu OpenSSL library, and it appears that this Ubuntu maintained package has not been updated with new Digicert certificates. The certificate in question is the DigiCert SHA2 Secure Server CA.
Follow these steps to fix the issue, which will download and install the new certificate:
Firstly, log into the USS Gateway command line and run the following command:
cd /tmp; curl -s https://secure.censornet.com/certfix/certfix.sh | sudo bash -s
NOTE: the above command replaces the expired certificate with the latest one. However, if this doesn't resolve the issue you will have to restart the proxy service. You can restart the proxy service from the command line with the following command:
sudo service ussgw_sysmond restart
An alternative method is to restart the proxy service via the Proxy UI. Navigate to Advanced and press Restart Proxy: