Unable to update devices - unable to get local issuer certificate

I’m trying to update a few devices and in some of them I’m getting this error:

Failed to download image 'registry2.balena-cloud.com/v2/xxxxx@sha256:xxxxxx' due to 'unable to get local issuer certificate'

Not sure what could be causing this for specific devices. All of them are running the same OS Version, Supervisor Version, and all of them had the same release.

Regards

This looks to be SSL communication issue, perhaps there is a DPI firewall/etc. in between the device(s) and the Internet.

A quick way to check would be to run:

$ curl -I https://registry2.balena-cloud.com/
HTTP/1.1 200 OK
Cache-Control: no-cache
Date: Wed, 26 May 2021 21:26:59 GMT
Connection: keep-alive

If this returns anything other than the above, then you should take a look at the network path…

Just checking in, were you able to run the command provided above to see if your issue is related to SSL communication issues?

Hi @cywang117 , sorry for the late response…

I think it is firewall issues, I tried the command and it failed. As soon as my network team opens the firewall and I have the chance to check again I’ll update this thread.

Thanks!