hub tunnel error - "The issuer certificate could not be found: this occurs if the issuer certificate of an untrusted certificate cannot be found."

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

A previously established tunnel is failing to connect intermittently.

The following error is seen in the tunnel client logs:

Mar 17 09:09:31:485 [22440] 0 hub: CTRL <hubname> certificate error: unable to get issuer certificate (2) 
Mar 17 09:09:31:485 [22440] 0 hub: CTRL <hubname> could not connect to server <ip_address>
Mar 17 09:09:31:485 [22440] 0 hub: CTRL <hubname> peer CTRL not currently running

After restarting the hub, the tunnel connects, but it eventually fails again.

Environment

DX UIM Hub 23.4.4 and prior

Cause

If a hub restart does not resolve the issue, the problem is caused by a bad/corrupt tunnel certificate.  Rebuild the tunnel with a proper certificate and try again.

If a hub restart resolves the problem and allows the tunnel to connect, this is caused by a defect in the hub.

Resolution

The defect will be resolved in DX UIM hub 23.4.6 (CU6 - Expected by the end of 2025 - subject to change)

Additional Information

Create a tunnel between two hubs in DX UIM