Docker Swarm: Error response from daemon: error while validating Root CA Certificate: x509: certificate has expired or is not yet valid

user_5649739 0
Viewed 8657

OS: CentOS 7 VM

Docker latest version

Commands Executed:

   1) docker swarm init
   2) docker swarm join --token SWMTKN-1-3iqtmbz55yvhxkahe2ncs7d9ebxzlzmw1pwhqzvmcemiolef63-3muc4qjs3mbvh53t8ktzzmb22 192.168.10.108:2377 
    Error: Error response from daemon: error while validating Root CA Certificate: x509: certificate has expired or is not yet valid

As you can see, swarm join is giving me this error. What is the reason for this error and where is it coming from?

Regards Aditya

docker-engine docker-swarm docker x509
6 Answers

this error generate when time not sync in your nodes. after initial swarm 

docker swarm init

you can see limitation time for swarm certificate with bellow command

docker swarm ca | openssl x509 -noout -text

your node time must be between

Validity
Not Before: Feb 20 10:21:00 2019 GMT
Not After : Feb 15 10:21:00 2039 GMT

and for setting node time in linux can use 'timedatectl' command

for automatic sync time , you can use follow command in every node

timedatectl set-timezone asia/Tehran
timedatectl set-ntp on

and you can show all timezone with 

timedatectl list-timezones
user_101822190

Simply deleted certificate and restarting service worked for me.

user_62437100

I solved it by setting the same date on both machines.

user_79971700

Indeed, the date and time was not synchronized between VMs where docker nodes were running:

The following commands helped me to overcome the issue:

systemctl stop ntpd ;  ntpdate *server* ; systemctl start ntpd

As docs state:

ntpdate sets the local date and time by polling the Network Time Protocol (NTP) server(s) given as the server arguments to determine the correct time

user_12643040

I did the following and its work for me

  • Change the time zone (GMT can be changed based on the time zone in the control node):

    timedatectl set-timezone GMT

  • Change the format of the Date in the node machine

    date --set "Tue 2021-12-21 17:18:07 GMT"

Tip: Get the date format from the swarm master node by running this command

docker swarm ca | openssl x509 -noout -text | grep "Not Before"
user_32007650
Related