CERT_UNTRUSTED error on node 0.10.34

[gregberge]

It seems that node 0.10.34 breaks everything...

     Error: CERT_UNTRUSTED
      at SecurePair.<anonymous> (tls.js:1381:32)
      at SecurePair.emit (events.js:92:17)
      at SecurePair.maybeInitFinished (tls.js:980:10)
      at CleartextStream.read [as _read] (tls.js:472:13)
      at CleartextStream.Readable.read (_stream_readable.js:341:10)
      at EncryptedStream.write [as _write] (tls.js:369:25)
      at doWrite (_stream_writable.js:226:10)
      at writeOrBuffer (_stream_writable.js:216:5)
      at EncryptedStream.Writable.write (_stream_writable.js:183:11)
      at write (_stream_readable.js:602:24)
      at flow (_stream_readable.js:611:7)
      at Socket.pipeOnReadable (_stream_readable.js:643:5)
      at Socket.emit (events.js:92:17)
      at emitReadable_ (_stream_readable.js:427:10)
      at emitReadable (_stream_readable.js:423:5)
      at readableAddChunk (_stream_readable.js:166:9)
      at Socket.Readable.push (_stream_readable.js:128:10)
      at TCP.onread (net.js:529:21)

[gdbtek]

it breaks everything for me as well. My application run just fine under 0.10.33 but NOT 0.10.34 Here is my sample package.json and source:

package.json

<root@nam-itc><~/tmp>
# cat package.json 
{
  "name": "tmp",
  "version": "1.0.0",
  "description": "",
  "main": "index.js",
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "author": "",
  "license": "ISC",
  "dependencies": {
    "aws-sdk": "2.1.4"
  }
}

index.js

<root@nam-itc><~/tmp>
# cat index.js 
var AWS = require('aws-sdk');

var options = {
  "accessKeyId": "MY_ACCESS_KEY_ID",
  "secretAccessKey": "MY_SECRET_ACCESS_KEY",
  "region": "us-east-1"
};

var params = {
  StackStatusFilter: [
    'CREATE_COMPLETE'
  ]
};

var cloudformation = new AWS.CloudFormation(options);
cloudformation.listStacks(params, function (err, data) {
  if (err) {
    console.log(err, err.stack);
  } else {
    console.log(data);
  }
});

Run using node.js v0.10.34

<root@nam-itc><~/tmp>
# node --version
v0.10.34

<root@nam-itc><~/tmp>
# node index.js 
{ [NetworkingError: CERT_UNTRUSTED]
  message: 'CERT_UNTRUSTED',
  code: 'NetworkingError',
  region: 'us-east-1',
  hostname: 'cloudformation.us-east-1.amazonaws.com',
  retryable: true,
  time: Thu Dec 18 2014 03:35:53 GMT-0800 (PST) } 'Error: CERT_UNTRUSTED\n    at SecurePair.<anonymous> (tls.js:1381:32)\n    at SecurePair.emit (events.js:92:17)\n    at SecurePair.maybeInitFinished (tls.js:980:10)\n    at CleartextStream.read [as _read] (tls.js:472:13)\n    at CleartextStream.Readable.read (_stream_readable.js:341:10)\n    at EncryptedStream.write [as _write] (tls.js:369:25)\n    at doWrite (_stream_writable.js:226:10)\n    at writeOrBuffer (_stream_writable.js:216:5)\n    at EncryptedStream.Writable.write (_stream_writable.js:183:11)\n    at write (_stream_readable.js:602:24)'

Run using node.js v0.10.33

<root@nam-itc><~/tmp>
# node --version
v0.10.33

<root@nam-itc><~/tmp>
# node index.js
{ ResponseMetadata: { RequestId: '2a7ee8e0-86aa-11e4-9df0-49ebbb7934b9' },
  StackSummaries: 
   [ { StackId: 'arn:aws:cloudformation:us-east-1:639132917637:stack/DEVELOPMENT-NAM-20141210-095615-US-EAST-1/391c62c0-8053-11e4-a2a7-50e241629418',
       StackName: 'DEVELOPMENT-NAM-20141210-095615-US-EAST-1',
       TemplateDescription: 'OPS',
       CreationTime: Wed Dec 10 2014 01:59:25 GMT-0800 (PST),
       StackStatus: 'CREATE_COMPLETE',
       StackStatusReason: '' } ] }

[mhart]

Seems to be an issue affecting many: nodejs/node-v0.x-archive#8894

Probably best to wait for 0.10.35

[lsegal]

It looks like this was a regression in 0.10.34 and was fixed in the ticket that @mhart referenced, so I will mark this as closed, since this is not an issue with the SDK itself. Thanks for bringing this to our attention!

[pburtchaell]

If you have node installed with homebrew, run brew switch node 0.10.28 to rollback. It solved the issue for me.

[lsegal]

Also note that 0.10.35 has been released, which should resolve this issue.

[garrows]

I had the same problem when I was on v0.10.34.
I upgraded to v0.10.35 and instead i get:

{ [InvalidClientTokenId: The security token included in the request is invalid.]
  message: 'The security token included in the request is invalid.',
  code: 'InvalidClientTokenId',
  time: Mon Jan 05 2015 16:26:42 GMT+1000 (AEST),
  statusCode: 403,
  retryable: false,
  retryDelay: 30 }

Not quite fixed but probably not your fault.

[garrows]

Turns out the access key was slightly wrong. Sorry.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs and link to relevant comments in this thread.