aquasecurity / aquasecurity/cloudsploit

Oracle cloud scan 505 certificate has expired

Open
#1,376 3 comments 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

Hi,

I'm trying to run cloudsploit on Oracle cloud, but getting 505. Certificate is not expired and it is working fine with command line OCLI. Any Ideas?

```
INFO: Using CloudSploit config file: ./config_oracle.js
INFO: Skipping AWS pagination mode
INFO: Determining API calls to make...
INFO: Found 55 API calls to make for oracle plugins
INFO: Collecting metadata. This may take several minutes...
node:events:505
throw er; // Unhandled 'error' event
^

Error: certificate has expired
at TLSSocket.onConnectSecure (node:_tls_wrap:1531:34)
at TLSSocket.emit (node:events:527:28)
at TLSSocket.emit (node:domain:475:12)
at TLSSocket._finishInit (node:_tls_wrap:945:8)
at ssl.onhandshakedone (node:_tls_wrap:726:12)
Emitted 'error' event on ClientRequest instance at:
at TLSSocket.socketErrorListener (node:_http_client:454:9)
at TLSSocket.emit (node:events:527:28)
at TLSSocket.emit (node:domain:475:12)
at emitErrorNT (node:internal/streams/destroy:151:8)
at emitErrorCloseNT (node:internal/streams/destroy:116:3)
at process.processTicksAndRejections (node:internal/process/task_queues:82:21) {
code: 'CERT_HAS_EXPIRED'
}

```

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the Oracle scan with config_oracle.js and compare its behavior with the working OCLI command. Trace the 55 Oracle API calls through the Node.js HTTPS path and investigate the CERT_HAS_EXPIRED error shown in the report. Done means the scan can complete against the same valid certificate without the 505 error.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, node.js
Domain
cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.