ssl certificate has expired

[malum]

Hello everyone,

I'm not a sysadmin so please excuse me if I'm naive about something. 

I'm using pulse secure to connect to my university vpn via this domain: https://vpn-ssl.unitn.it/

Since today, I am unable to log into the vpn anymore, see below for error-log:

20200713140315.370148 pulsesvc[p26812.t26812] dsncuiapi.para DsNcUiApi:sNcUiApi (dsncuiapi.cpp:75)
20200713140317.693416 pulsesvc[p26812.t26812] pulsesvc.info New pulsesvc log level set to 3 (pulsecommon.cpp:76)
20200713140317.693521 pulsesvc[p26812.t26812] sysdeps.info restoring DNS settings... (sysdeps.cpp:1000)
20200713140317.773560 pulsesvc[p26812.t26812] pulsesvc.info Proxy is not provided. Reading from system proxy (pulsesvc.cpp:244)
20200713140317.773830 pulsesvc[p26812.t26812] pulseui.info libproxy load failed /usr/lib/libproxy.so.1: cannot open shared object file: No such file or directory
(pulseProxy.cpp:183)
20200713140317.773909 pulsesvc[p26812.t26812] pulsesvc.info Proxy host : NULL (pulsesvc.cpp:256)
20200713140317.773935 pulsesvc[p26812.t26812] pulsesvc.info Proxy port : 80 (pulsesvc.cpp:257)
20200713140317.773954 pulsesvc[p26812.t26812] pulsesvc.info Proxy user : NULL (pulsesvc.cpp:258)
20200713140317.773972 pulsesvc[p26812.t26812] pulsesvc.info Proxy password : NULL (pulsesvc.cpp:259)
20200713140317.773989 pulsesvc[p26812.t26812] pulseui.info Proxy object is delete (pulseProxy.cpp:28)
20200713140317.775108 pulsesvc[p26812.t26812] DSInet.info IVE host vpn-ssl.unitn.it resolved to 193.205.206.57, port 443 (dsinet.cpp:329)
20200713140317.775823 pulsesvc[p26812.t26812] dsssl.warn ssl_init : Failed to load CA certificates (DSSSLSock.cpp:1515)
20200713140317.504 pulsesvc[p26812.t26812] dsssl.error verify_server_cert_callback : Certificate Verification Failed : error:certificate has expired depth:3 errorno:10 (DSSSLSock.cpp:1588)
20200713140317.647 pulsesvc[p26812.t26812] dsssl.info log_cert_info : Subject : C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root (DSSSLSock.cpp:1555)
20200713140317.820 pulsesvc[p26812.t26812] dsssl.error SSL_connect failed. Error 1 (DSSSLSock.cpp:1834)
20200713140317.936 pulsesvc[p26812.t26812] DSInet.error failed to connect to (vpn-ssl.unitn.it) error 1 (dsinet.cpp:412)
20200713140317.971 pulsesvc[p26812.t26812] dsclient.error unable to open URL: (https://vpn-ssl.unitn.it) with error -7 (dsclient.cpp:321)
20200713140317.994 pulsesvc[p26812.t26812] ncapp.error Failed to authenticate with IVE. Error 2 (pulsesvc.cpp:284)
20200713144217.112616 pulsesvc[p8303.t8303] dsncuiapi.para DsNcUiApi:sNcUiApi (dsncuiapi.cpp:75)
20200713144217.112825 pulsesvc[p8303.t8303] dsncuiapi.para DsNcUiApi::~DsNcUiApi (dsncuiapi.cpp:83)

Using openssl, I'm able to get a certificate from said domain:

openssl s_client -connect 193.205.206.57:443

Does this help me solve the issue? What can I do to fix this? I'd really appreciate some help, since I'm not able to understand even the basics of SSL certificates.

Thanks!

[malum · Accepted solution]

I managed to fix this by re-installing like so

sudo apt install ca-certificates

I still wonder what happened here. Shouldn't my OS regularly update the ca certificates by itself?  

[[email protected]]

I've seen updates to ca-certs when I do apt update, maybe it update during the re-installation.