SSL errors due to expired root CA certificate

Incident Report for Workato US

Resolved

A common root CA certificate used by various API endpoints expired earlier today (https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020).

In cases where the API server was including this certificate in its credentials for new TLS/SSL connections, this resulted in "certificate verify failed" errors appearing in recipe jobs.

We implemented a fix that worked around this problem, which was deployed at approximately 16:15 PDT.

At this point these errors should no longer be occurring.

Posted May 30, 2020 - 16:22 PDT